4, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:41:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4008001) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002640)={&(0x7f0000002580)={0x84, 0xb, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x62f}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_SKBQUEUE={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xccc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x101}}]}]}, 0x84}}, 0x8800) 15:41:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4008001) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002640)={&(0x7f0000002580)={0x84, 0xb, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x62f}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_SKBQUEUE={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xccc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x101}}]}]}, 0x84}}, 0x8800) 15:41:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:41:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) 15:41:39 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) r2 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:41:39 executing program 7: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x6000050) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10480092}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)={0x48, 0x2, 0x6, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x3ff}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x401}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x1f}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x884}, 0x90) epoll_create(0x7f) 15:41:39 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) r2 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:41:39 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) r2 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:41:39 executing program 7: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x6000050) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10480092}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) epoll_create(0x7f) 15:41:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:41:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:41:39 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) r2 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:41:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:41:40 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:41:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:41:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:41:52 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) r2 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:41:52 executing program 7: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x6000050) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10480092}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) epoll_create(0x7f) 15:41:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:41:52 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4008001) 15:41:52 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4008001) 15:41:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4008001) 15:41:52 executing program 7: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x6000050) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10480092}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44) epoll_create(0x7f) 15:41:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:41:52 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r2, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:41:52 executing program 7: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x6000050) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10480092}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}}, 0x0) epoll_create(0x7f) 15:41:52 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:41:52 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:41:52 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:41:52 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)) 15:42:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:08 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)) 15:42:08 executing program 7: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x6000050) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x7f) 15:42:08 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:08 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:08 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)) 15:42:08 executing program 7: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x6000050) epoll_create(0x7f) 15:42:08 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) r1 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:08 executing program 7: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) epoll_create(0x7f) 15:42:08 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x20}}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:09 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) r1 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r1, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:09 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:09 executing program 6: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:09 executing program 7: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) epoll_create(0x7f) 15:42:21 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:21 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:21 executing program 7: epoll_create(0x7f) 15:42:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:21 executing program 7: epoll_create(0x0) 15:42:21 executing program 6: r0 = syz_open_dev$vcsu(0x0, 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:21 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:21 executing program 7: epoll_create(0x0) 15:42:21 executing program 6: r0 = syz_open_dev$vcsu(0x0, 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:21 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:21 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x0, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:21 executing program 6: r0 = syz_open_dev$vcsu(0x0, 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) 15:42:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) 15:42:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:34 executing program 7: epoll_create(0x0) 15:42:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) socket$nl_netfilter(0x10, 0x3, 0xc) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:34 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0x0, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:34 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) 15:42:34 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4008001) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002640)={&(0x7f0000002580)={0x84, 0xb, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x62f}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_SKBQUEUE={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xccc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x101}}]}]}, 0x84}}, 0x8800) 15:42:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x3c, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:34 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:34 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:34 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:34 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x1}}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:34 executing program 6: syz_open_dev$vcsu(&(0x7f0000001ec0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:45 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:42:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:45 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4008001) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002640)={&(0x7f0000002580)={0x84, 0xb, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x62f}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_SKBQUEUE={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xccc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x101}}]}]}, 0x84}}, 0x8800) 15:42:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xf, 0x6, 0x0, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:42:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) socket$inet_tcp(0x2, 0x1, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:45 executing program 6: syz_open_dev$vcsu(&(0x7f0000001ec0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:45 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) 15:42:45 executing program 6: syz_open_dev$vcsu(&(0x7f0000001ec0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) 15:42:45 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:45 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x48, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:45 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:46 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x10000) 15:42:46 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:46 executing program 6: r0 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(r0, 0x0, 0x0) 15:42:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:58 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) socket$nl_netfilter(0x10, 0x3, 0xc) 15:42:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) socket$nl_netfilter(0x10, 0x3, 0xc) 15:42:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) socket$nl_netfilter(0x10, 0x3, 0xc) 15:42:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:58 executing program 6: sendmsg$NFT_MSG_GETOBJ(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x13, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0xa}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x58}}, 0x20044000) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x1) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x50, 0xe, 0x6, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000044}, 0x6000050) r0 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10480092}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}, ["", "", "", "", ""]}, 0x14}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x0, 0x8, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x44) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0x0, 0x0, 0x7}, ["", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000000) epoll_create(0x7f) 15:42:58 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r2, &(0x7f0000001dc0)={&(0x7f0000001d00), 0xc, &(0x7f0000001d80)={&(0x7f0000001d40)={0x20, 0x0, 0x8, 0x401, 0x70bd2c, 0x25dfdbfb, {0x7, 0x0, 0xa}, [@typed={0xc, 0x45, 0x0, 0x0, @u64=0x7}]}, 0x20}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000001ec0), 0xff, 0x80000) sendmsg$IPCTNL_MSG_EXP_DELETE(r3, &(0x7f0000002040)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001f40)={0xa0, 0x2, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_EXPECT_MASK={0x8c, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @private=0xa010100}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x40005}, 0x10000) socketpair(0xa, 0x4, 0x8ce, &(0x7f0000002400)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_EXP_GET(r4, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x24, 0x1, 0x2, 0x301, 0x0, 0x0, {0x7, 0x0, 0x1}, [@CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x3}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x24000800}, 0x4008001) sendmsg$IPSET_CMD_TEST(r4, &(0x7f0000002680)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002640)={&(0x7f0000002580)={0x84, 0xb, 0x6, 0x801, 0x0, 0x0, {0xc, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x62f}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}}, @IPSET_ATTR_SKBQUEUE={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x2c, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xccc}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e23}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x101}}]}]}, 0x84}}, 0x8800) 15:42:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:58 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:58 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:42:58 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:42:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:42:58 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:43:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:43:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:43:10 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:43:10 executing program 3: process_madvise(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:43:10 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, 0x0, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:10 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:43:10 executing program 3: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) 15:43:10 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:10 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:43:10 executing program 3: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:43:10 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:10 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:43:10 executing program 6: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) 15:43:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:43:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x8010) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:43:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:43:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:25 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:25 executing program 6: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) 15:43:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:43:25 executing program 6: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0) 15:43:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000019c0)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001980)={&(0x7f0000001880)={0xd8, 0xa, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x30, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x7ff}, @IPSET_ATTR_ETHER={0xa, 0x11, @random="04ed58d87199"}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}]}, @IPSET_ATTR_DATA={0x50, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x7}, @IPSET_ATTR_IFACE={0x14, 0x17, 'hsr0\x00'}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x9}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5d}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_NAME={0x9, 0x12, 'syz1\x00'}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x54530000}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x9}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2={0x18, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}, @IPSET_ATTR_ETHER={0xa, 0x11, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}}]}]}, 0xd8}, 0x1, 0x0, 0x0, 0x4040}, 0x20000814) 15:43:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:43:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) 15:43:25 executing program 6: process_madvise(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) 15:43:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:25 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:43:25 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 15:43:25 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:25 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:43:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:25 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) 15:43:25 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, 0x0, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$IPCTNL_MSG_CT_GET_STATS(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001740)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000017c0)={&(0x7f0000001780)={0x14, 0x5, 0x1, 0x201, 0x0, 0x0, {0x3, 0x0, 0xa}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40041) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:43:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:43:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:43:39 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:39 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) 15:43:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) 15:43:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:39 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 15:43:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:43:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) 15:43:39 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:39 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) sendmsg$NFT_MSG_GETOBJ_RESET(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x2c, 0x15, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24008040}, 0x8000) 15:43:39 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:43:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x20000800) 15:43:39 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x30, 0x1, 0x1, 0x3, 0x0, 0x0, {0x2, 0x0, 0x6}, [@CTA_LABELS_MASK={0xc, 0x17, [0x96, 0x8000]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x90}, 0x4000000) 15:43:53 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000001700)={&(0x7f0000001640)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001680)={0x34, 0x4, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8847}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x1) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:43:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 15:43:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) 15:43:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:43:53 executing program 6: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f0000000fc0)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000f80)={&(0x7f0000000dc0)={0x198, 0x0, 0x2, 0x101, 0x0, 0x0, {0xf, 0x0, 0xa}, [@CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0xffff}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x6}, @CTA_EXPECT_NAT={0x14c, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0x8c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3a}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x88}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @loopback}, {0x14, 0x4, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @rand_addr=0x64010102}}}]}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x94, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @local}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @rand_addr=0x64010101}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x3c}}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x28}}}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_EXPECT_NAT_DIR={0x8}]}, @CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x4}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz1\x00'}, @CTA_EXPECT_HELP_NAME={0x9, 0x6, 'syz0\x00'}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x2}]}, 0x198}, 0x1, 0x0, 0x0, 0x20000000}, 0x48001) 15:43:53 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:43:53 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x40, 0x3, 0x3, 0x201, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc}, @NFQA_VERDICT_HDR={0xc}, @NFQA_MARK={0x8}, @NFQA_VERDICT_HDR={0xc}]}, 0x40}}, 0x20000000) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET_DYING(0xffffffffffffffff, 0x0, 0x0) 15:43:53 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:43:53 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) 15:43:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:43:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:43:53 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:43:53 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) process_madvise(r5, &(0x7f0000000d40)=[{&(0x7f0000000c80)="3e4fa5511a9cf33f76d083242badc96c33ac2c1444d77fce2500861d7a111f9c5f11169a87b7f92ef6b06f8a8204609d6ec728b8586157842208fadd955ae4b5897b084c7cbaf881385591d00da9b3902133197a992bdc1c37ca922edfd427124df71d6a60a6eec1affc1b1e331bbd818e3526519064857017a7eae1501cbca3140b2cf977182df05dd1f485bd6b385e1eb201c2f6ffbab99b510618e001ad5342fe064032c685050bd94e567818c388c297974df157231676f5db", 0xbb}], 0x1, 0x4, 0x0) 15:43:53 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:43:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:44:05 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:44:05 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) 15:44:05 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:44:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:05 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:44:05 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:44:05 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:44:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mbind(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2, &(0x7f0000001600)=0x100000001, 0x9, 0x4) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:44:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:05 executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) 15:44:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:17 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_STATS(r1, &(0x7f00000015c0)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x14, 0x5, 0x1, 0x801, 0x0, 0x0, {0x1, 0x0, 0xa}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:44:17 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) 15:44:17 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:44:17 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:44:17 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:44:17 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:44:17 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:44:18 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x4010, 0xffffffffffffffff, 0x0) 15:44:18 executing program 1: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:18 executing program 0: mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0) 15:44:18 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x0, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:44:18 executing program 1: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:18 executing program 1: getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:18 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) 15:44:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:44:30 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 15:44:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:44:30 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:44:30 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) 15:44:30 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:44:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_timeval(r6, 0x1, 0x42, &(0x7f0000000c00), &(0x7f0000000c40)=0x10) 15:44:30 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:30 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:30 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xbc, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}]}, 0xbc}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:44:30 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 15:44:30 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:30 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 15:44:30 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:44:30 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) socket$inet_tcp(0x2, 0x1, 0x0) 15:44:30 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) socket$nl_netfilter(0x10, 0x3, 0xc) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:44:46 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1, 0x4010, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:44:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) r5 = syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) sendmsg$IPCTNL_MSG_CT_GET_STATS(r5, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0x5, 0x1, 0x301, 0x0, 0x0, {0xc, 0x0, 0x9}, ["", "", "", ""]}, 0x14}}, 0x4000) 15:44:46 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)) 15:44:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0xb4, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:44:46 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:44:46 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 15:44:46 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:44:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000001a00), &(0x7f0000001a40)=0x10) 15:44:46 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) socket$inet_tcp(0x2, 0x1, 0x0) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:44:46 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x28, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}]}, 0x28}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:44:46 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) syz_open_dev$vcsu(&(0x7f0000000ac0), 0x1de1, 0x430500) 15:44:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, &(0x7f0000001a40)) 15:44:46 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000002040)={&(0x7f0000001f80)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x20, 0x9, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 15:44:46 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)) 15:45:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) accept(r0, &(0x7f0000001440)=@generic, &(0x7f00000014c0)=0x80) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:45:01 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r4, &(0x7f0000001f40)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001f00)={&(0x7f0000001e80)={0x68, 0x2, 0x3, 0x401, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb8a}, @NFQA_CFG_PARAMS={0x9, 0x2, {0xffffe699, 0x1}}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x2}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x1}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x300ebb1d, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x1a}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x1ff}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x7}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x6}}]}, 0x68}, 0x1, 0x0, 0x0, 0x20044081}, 0x4000) 15:45:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x20, 0x0, 0x9, 0x0, 0x0, 0x0, {}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}]}, 0x20}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:01 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) 15:45:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) 15:45:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) 15:45:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:01 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) 15:45:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) 15:45:01 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:01 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:01 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) socket$nl_netfilter(0x10, 0x3, 0xc) 15:45:01 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_timeval(r0, 0x1, 0x14, 0x0, 0x0) 15:45:01 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 15:45:01 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:15 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) 15:45:15 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r0, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001340)={0x50, 0x2, 0x9, 0x101, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFCTH_TUPLE={0x24, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xf}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x7}, @NFCTH_STATUS={0x8}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x19}]}, 0x50}, 0x1, 0x0, 0x0, 0x1}, 0x2008081) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:45:15 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:15 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:45:15 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) socket$nl_netfilter(0x10, 0x3, 0xc) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0xc000) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:15 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:15 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 15:45:15 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:15 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:15 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:15 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)) 15:45:15 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)) 15:45:15 executing program 7: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:15 executing program 1: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) socketpair(0x5, 0x6, 0x2021, &(0x7f0000000a40)={0xffffffffffffffff}) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x24, 0x4, 0x8, 0x5, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6001}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) 15:45:15 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x400) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:45:28 executing program 7: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:45:28 executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) r3 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r4, &(0x7f0000000a80)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000980)={0xc0, 0x4, 0x8, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x40}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe9}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x401}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe6}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffe0}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xfffff2e3}]}]}, 0xc0}}, 0x40000) shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:28 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x120000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x28, 0x2, 0x8, 0x5, 0x0, 0x0, {0x3, 0x0, 0x7}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4) 15:45:28 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) 15:45:28 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:28 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x5000) 15:45:28 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001800)='syz1\x00', 0x1ff) 15:45:28 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) 15:45:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x4000090) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:28 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:45:28 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:28 executing program 7: shmat(0xffffffffffffffff, &(0x7f0000002000/0x3000)=nil, 0x0) 15:45:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:28 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 15:45:43 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:45:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r1, 0x89f6, &(0x7f0000000740)={'syztnl0\x00', &(0x7f00000006c0)={'ip6tnl0\x00', r2, 0x2f, 0x5, 0x8, 0x9, 0x22, @rand_addr=' \x01\x00', @private2, 0x7840, 0x20, 0x1, 0x7fff}}) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:45:43 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) 15:45:43 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:43 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)={0xffffffffffffffff}) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f00000008c0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000800)={0x54, 0x3, 0x6, 0x401, 0x0, 0x0, {0xf, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x54}}, 0xc014) 15:45:43 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001800)='syz1\x00', 0x1ff) 15:45:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001800)='syz1\x00', 0x1ff) 15:45:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000680)={'vxcan0\x00'}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:45:43 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:45:43 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) 15:45:43 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r1, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:43 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:43 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001800)='syz1\x00', 0x1ff) 15:45:43 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) socketpair(0x18, 0x1, 0x7fffffff, &(0x7f0000000780)) 15:45:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001800)='syz1\x00', 0x1ff) 15:45:43 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) shmget$private(0x0, 0x2000, 0x8, &(0x7f0000002000/0x2000)=nil) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:45:43 executing program 5: recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:45:43 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) 15:45:55 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) sendmsg$NFT_MSG_GETTABLE(0xffffffffffffffff, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000700)={&(0x7f0000000680)={0x58, 0x1, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8080}, 0x24004080) 15:45:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:55 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001800)='syz1\x00', 0x1ff) 15:45:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:45:55 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:45:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000180)={'syztnl2\x00', 0x0, 0x8000, 0x10, 0x2, 0x0, {{0x14, 0x4, 0x2, 0x2f, 0x50, 0x67, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x11}, @empty, {[@end, @end, @noop, @timestamp={0x44, 0x28, 0xe4, 0x0, 0xc, [0xff, 0x1f80000, 0x14, 0x3ff, 0x0, 0xcc4, 0x1, 0x20000, 0x10000]}, @end, @lsrr={0x83, 0xf, 0xb4, [@dev={0xac, 0x14, 0x14, 0x1c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101]}, @end]}}}}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:45:55 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) 15:45:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:45:55 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:45:55 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) accept(r0, &(0x7f00000000c0)=@generic, &(0x7f0000000140)=0x80) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:45:55 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x40) 15:46:07 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:07 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14}, 0x14}}, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x14}, 0x14}}, 0x0) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) sendmsg$NFT_MSG_GETSET(0xffffffffffffffff, 0x0, 0x0) 15:46:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)) 15:46:07 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 15:46:07 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x40, 0x8, 0x6, 0x801, 0x0, 0x0, {0x5, 0x0, 0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x40}}, 0x40045) 15:46:07 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000040)={0x0, @ethernet={0x306, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, @vsock={0x28, 0x0, 0x2711, @hyper}, @qipcrtr={0x2a, 0x1, 0x4001}, 0x0, 0x0, 0x0, 0x0, 0x101, &(0x7f0000000000)='veth1\x00', 0x0, 0x3, 0x9}) r1 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:46:07 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:46:07 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) 15:46:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40002104) 15:46:07 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) 15:46:07 executing program 3: syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:46:07 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:07 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) 15:46:07 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0xd, 0xa, 0x3, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000) 15:46:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40002104) 15:46:07 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:46:07 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)) 15:46:07 executing program 6: process_mrelease(0xffffffffffffffff, 0x0) setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) 15:46:07 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40002104) 15:46:07 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:46:07 executing program 6: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) 15:46:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:07 executing program 6: setsockopt$inet_udp_encap(0xffffffffffffffff, 0x11, 0x64, 0x0, 0x0) 15:46:07 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:46:07 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x40002104) 15:46:07 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) openat$cgroup_freezer_state(r1, &(0x7f0000000400), 0x2, 0x0) 15:46:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:46:20 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:46:20 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:46:20 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) 15:46:20 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40002104) 15:46:20 executing program 2: recvmsg(0xffffffffffffffff, 0x0, 0x0) 15:46:20 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8088}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x50, 0x3, 0x3, 0x101, 0x0, 0x0, {0x5}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x400}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x4}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffe}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x8a}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xc525}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x9}}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x1) 15:46:20 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:20 executing program 4: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:46:20 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:46:20 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40002104) 15:46:20 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) openat$cgroup(0xffffffffffffffff, &(0x7f0000000280)='syz1\x00', 0x200002, 0x0) 15:46:35 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:35 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:46:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:35 executing program 4: socketpair(0x10, 0x800, 0x2, &(0x7f0000000900)) 15:46:35 executing program 3: socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000000780)=""/233, 0xe9, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:46:35 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:46:35 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40002104) 15:46:35 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) sendmsg$IPSET_CMD_SAVE(r0, &(0x7f0000000240)={&(0x7f0000000180), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, 0x8, 0x6, 0x3, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4004}, 0x50) 15:46:35 executing program 4: socketpair(0x0, 0x800, 0x2, &(0x7f0000000900)) 15:46:35 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) sendmsg$NFQNL_MSG_VERDICT_BATCH(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x3, 0x3, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x8}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x8000000000000005, 0x6}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xa8}]}, 0x34}, 0x1, 0x0, 0x0, 0x1000}, 0x0) 15:46:35 executing program 6: recvmsg(0xffffffffffffffff, 0x0, 0x40002104) 15:46:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000900)) 15:46:47 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:47 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) 15:46:47 executing program 4: socketpair(0x0, 0x800, 0x2, &(0x7f0000000900)) 15:46:47 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:46:47 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:46:47 executing program 6: recvmsg(0xffffffffffffffff, 0x0, 0x40002104) 15:46:47 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x4, 0x4) 15:46:47 executing program 6: recvmsg(0xffffffffffffffff, 0x0, 0x40002104) 15:46:47 executing program 6: socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x40002104) 15:46:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000900)) 15:46:47 executing program 4: socketpair(0x0, 0x800, 0x2, &(0x7f0000000900)) 15:46:47 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, 0x0, &(0x7f0000000900)) 15:46:47 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) 15:46:47 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) socketpair(0x9, 0xa, 0x3, &(0x7f0000000000)) 15:47:01 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:47:01 executing program 6: socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x40002104) 15:47:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, 0x0}, 0x40002104) 15:47:01 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) pidfd_getfd(r1, r2, 0x0) 15:47:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:47:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:47:01 executing program 4: socketpair(0x10, 0x0, 0x2, &(0x7f0000000900)) 15:47:01 executing program 0: process_mrelease(0xffffffffffffffff, 0x0) 15:47:01 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)) 15:47:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)}, &(0x7f0000000900)=0x40) 15:47:01 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:47:01 executing program 6: socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, 0x0, 0x40002104) 15:47:01 executing program 4: socketpair(0x10, 0x0, 0x0, &(0x7f0000000900)) 15:47:01 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000900)=0x40) 15:47:14 executing program 2: recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:47:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:47:14 executing program 4: socketpair(0x10, 0x0, 0x0, 0x0) 15:47:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) pidfd_getfd(r1, r2, 0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:47:14 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) 15:47:14 executing program 6: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x0) 15:47:14 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = pidfd_getfd(r1, r2, 0x0) sendmsg$IPSET_CMD_TYPE(r3, &(0x7f0000000940)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x1c, 0xd, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x11) r4 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r4, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) sendmsg$OSF_MSG_ADD(r4, &(0x7f0000001580)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001540)={&(0x7f0000000bc0)={0x964, 0x0, 0x5, 0x101, 0x0, 0x0, {0xa, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x4}, 0x8, 0x3, 0x5, 0x40, 0x14, 'syz1\x00', "eb65593b096a89ca3d5930d0c13751ec949c0f9d37d0288bb5ab2e45c4c6ad27", "1d13fa09d4366c9f4a72f0929a949511a9ee044bcd71100b6f24ca4698d311a5", [{0x2, 0xfff, {0x2, 0x4}}, {0x800, 0x9, {0x2}}, {0x1, 0x1, {0x3, 0x3}}, {0x9, 0x80, {0x2, 0x8}}, {0x2, 0x2, {0x2, 0x8}}, {0x6, 0x5}, {0x20, 0x6, {0x2}}, {0x2, 0x5, {0x0, 0x8001}}, {0xb436, 0xfffb, {0x3, 0x6}}, {0x81, 0x35, {0x1, 0x40}}, {0xcbd, 0x676e, {0x2, 0x1}}, {0x9, 0x5, {0x2, 0x7}}, {0x8000, 0x7fff, {0x2, 0x3}}, {0x5, 0x0, {0x0, 0x101}}, {0x3f, 0x9, {0x3, 0x80000000}}, {0x7, 0x5, {0x0, 0x40}}, {0xb50, 0x0, {0x1, 0x4d}}, {0x7fff, 0x7, {0x0, 0x3ff}}, {0x46, 0x0, {0x1, 0x7fff}}, {0xc81, 0x7, {0x0, 0xfff}}, {0x2, 0x5, {0x2, 0x8}}, {0x0, 0x4, {0x2}}, {0x0, 0x5, {0x2, 0x5}}, {0x9, 0x2, {0x1, 0x3}}, {0x4, 0x9, {0x0, 0x400}}, {0x0, 0x3, {0x1, 0x4ae1}}, {0x4, 0x2, {0x0, 0x686}}, {0x7, 0x9, {0x2, 0x6}}, {0x5ea1, 0x1000, {0x0, 0x40}}, {0x3, 0x5, {0x2, 0xb57e4fb3}}, {0x0, 0xee, {0x2}}, {0xb9ef, 0x3, {0x3, 0x7}}, {0x40, 0x3ff, {0x0, 0x5}}, {0x8, 0xd4, {0x2}}, {0xff7d, 0x430, {0x0, 0x101}}, {0x3f, 0x5, {0x3, 0x3}}, {0x100, 0x200, {0x3, 0x9}}, {0x1f, 0x1, {0x3, 0x1000}}, {0x20, 0x1000, {0x3, 0x1}}, {0x81, 0x2, {0x6be4b93c0b2deb4c, 0xddc7}}]}}}, {{0x254, 0x1, {{0x0, 0x8001}, 0x2, 0x3, 0x8000, 0x5f, 0x23, 'syz0\x00', "7edc9eda58c84d8c0e10a95562da5e5356b121a0e8ceafa618dd6df015a21d8c", "96e25515bbb7f3aa79445a5abf3f6e9e845c8bf44ab8122110904effd0cf5706", [{0x536f, 0x556, {0x2, 0xed3}}, {0x0, 0x5, {0x0, 0x80}}, {0x1, 0x1, {0x0, 0x7}}, {0xff, 0x2, {0x1, 0x9}}, {0x3, 0xfff8, {0x3}}, {0x200, 0x1, {0x1}}, {0x9, 0x1, {0x2, 0x6}}, {0x1, 0xebcb, {0x0, 0x9}}, {0x4, 0x2, {0x3, 0x20}}, {0x1f, 0x7, {0x2, 0x80000000}}, {0x7d0, 0x6, {0x2, 0x1ff}}, {0x5, 0x4, {0x1, 0x5}}, {0x1, 0xb0, {0x0, 0x7fffffff}}, {0x7, 0x1, {0x0, 0x3}}, {0xfff, 0x9, {0x2, 0xfffff800}}, {0x5, 0xffff, {0x1}}, {0x8, 0x30, {0x3, 0xffffffff}}, {0x7d8, 0xf5c, {0x2, 0x7f}}, {0x8, 0x2, {0x2, 0x4}}, {0x55, 0x3, {0x2, 0x3}}, {0x1, 0x9, {0x3, 0x3}}, {0x9, 0x0, {0x0, 0x94a8}}, {0x1, 0x8458, {0x3, 0x8}}, {0x841d, 0x1, {0x0, 0x3ff}}, {0xfffb, 0x1, {0x0, 0x80}}, {0x3ff, 0x9, {0x2, 0x3}}, {0x1, 0x3f, {0x2, 0x2}}, {0x3, 0x5}, {0xffff, 0xff, {0x1, 0xa4c}}, {0xff7f, 0x0, {0x1, 0x1f}}, {0x0, 0x7, {0x1, 0x7}}, {0x1, 0x7, {0x0, 0xfffffff8}}, {0x1, 0x6, {0x2, 0x1}}, {0x2, 0x401, {0x3, 0x4}}, {0x800, 0x0, {0x1, 0xaf93}}, {0xda7, 0x2, {0x0, 0xfffffe00}}, {0x20, 0x6, {0x0, 0x2}}, {0x2, 0x7, {0x1, 0x6}}, {0x3ff, 0x8a, {0x1, 0xbc2}}, {0x101, 0xffff, {0x3}}]}}}, {{0x254, 0x1, {{0x1, 0x1c7}, 0x0, 0x2, 0xffff, 0x1, 0xa, 'syz1\x00', "2ed0259eae46c72b2625ed4072923886a42616d318e7b1dc1ecd80000833ff58", "56b652a7fb9f62cfe18da22666f38281d4c5336813762bf8654848b07c8b1a76", [{0x80, 0x8001, {0x1, 0x4}}, {0x3, 0x200, {0x0, 0x100}}, {0x400, 0x7ff, {0x1, 0x10001}}, {0xaddd, 0x7ff, {0x1, 0x1ff}}, {0x7, 0x800, {0x2, 0x5}}, {0x1, 0x3ff, {0x2, 0x10001}}, {0x6, 0xfffe, {0x2, 0x7}}, {0x8, 0x6, {0x0, 0xb5}}, {0x6, 0x4, {0x0, 0x3}}, {0xbd, 0xd5, {0x1, 0x9}}, {0xad, 0xf7, {0x0, 0x5}}, {0x401, 0x3, {0x2, 0xfffff801}}, {0xfffd, 0x401, {0x3, 0x8}}, {0x0, 0x1, {0x10827742105549b9, 0x9}}, {0x40, 0x6, {0x3, 0x4}}, {0xef6, 0x73, {0x2, 0x6}}, {0x9, 0x1, {0x3, 0x80}}, {0x1, 0x9, {0x1, 0x4}}, {0x5, 0x6, {0x3, 0x2}}, {0x1, 0x40, {0x0, 0xffffffff}}, {0x43, 0x8, {0x3, 0x2}}, {0x40, 0x1000, {0x1, 0x400}}, {0x0, 0xb7, {0x0, 0x7f}}, {0x3, 0x8f5, {0x0, 0xfffffffe}}, {0x2000, 0x800, {0x1, 0x49}}, {0xd32e, 0x7, {0x0, 0xa84}}, {0x4, 0x3, {0x3, 0x1}}, {0x79, 0x6, {0x3, 0x9}}, {0x8, 0x0, {0x0, 0x4}}, {0xfffd, 0x1, {0x0, 0x6}}, {0x3, 0x7fff, {0x1, 0x2}}, {0x31f, 0x7, {0x1}}, {0x9, 0x5, {0x2}}, {0x5, 0x5, {0x3, 0x3f}}, {0x4, 0x6, {0x1, 0xffffffff}}, {0x8001, 0x8, {0x2, 0x7cc}}, {0x2, 0x547, {0x0, 0x81}}, {0x3ff, 0x7ff, {0x3, 0x40}}, {0x7, 0x3f, {0xbad4de8acf4f81f4, 0x1}}, {0x9, 0x5e1, {0x2, 0x229}}]}}}, {{0x254, 0x1, {{0x3, 0x1}, 0x8, 0x6, 0x9, 0x3ff, 0xa, 'syz1\x00', "ebcf1cb70fad2f78602c106073b7ad3da3331fab1f80ed85c3b4fed44745e78b", "22ee4c508e0a74699632468d660e7282266c696081052c4697941ebcb9c45335", [{0x9, 0x81, {0x0, 0x90}}, {0xff, 0xfffa, {0x3, 0x1317}}, {0x3, 0x7, {0x2, 0xe9ac}}, {0x6, 0x401, {0x0, 0xfffff45d}}, {0x800, 0x8001, {0x0, 0x9}}, {0x301, 0x9, {0x3, 0x800}}, {0x0, 0xff80, {0x3, 0x5}}, {0x8000, 0x0, {0x2, 0xe0000000}}, {0x4, 0x5, {0x2, 0x7}}, {0x401, 0x7, {0x2, 0x10000}}, {0xffff, 0x74e6, {0x0, 0x2}}, {0x8f, 0xffff, {0x3}}, {0x461, 0x8, {0x3}}, {0x1000, 0x3, {0x3, 0x6}}, {0x8, 0x3, {0x0, 0x372bf4c7}}, {0x7ff, 0x1f, {0x1, 0xfff}}, {0xeb8, 0x8000, {0x1, 0xdf}}, {0x7ff, 0x7fff, {0x2, 0x6}}, {0x150, 0x12, {0x0, 0x9}}, {0x100, 0x8, {0x3}}, {0x20, 0x7f, {0x0, 0x80}}, {0x6, 0x4, {0x2, 0xffff0001}}, {0x1af9, 0xfff9, {0x1, 0xe732}}, {0x9, 0x6f4, {0x1, 0x57c3}}, {0x0, 0x9, {0x0, 0xff}}, {0x2e, 0x6, {0x1, 0x3}}, {0x7, 0x0, {0x2, 0x9}}, {0xf309, 0xff, {0x3}}, {0x401, 0xe00, {0x3, 0x4}}, {0x400, 0x4, {0x0, 0x3}}, {0x0, 0xff, {0x2, 0x1}}, {0x9, 0x467, {0x3, 0x5}}, {0xff00, 0x20, {0x1, 0x7}}, {0x800, 0x800, {0x2, 0xffff8001}}, {0x2, 0x1, {0x1, 0x7ff}}, {0x6, 0x9, {0x1, 0x5fa}}, {0x0, 0x3, {0x0, 0xff}}, {0x5, 0x9, {0x2, 0xfffffc01}}, {0x9, 0x101, {0x3, 0x9}}, {0x5, 0x1000, {0x0, 0x80000001}}]}}}]}, 0x964}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004020) socketpair(0x25, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff}) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000017c0)={&(0x7f0000001600)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001780)={&(0x7f0000001640)={0x124, 0xa, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_SET_USERDATA={0xc9, 0xd, 0x1, 0x0, "2711bc221a0f3789700c714c91992ae9d47c3571e8375272e934813f9649a0eedb5b7dd9e6bdd26c7ffc90665b55399a714fded7e3e2397648ef33610d7c09412df3e956951b768ad599b7f7627dd87e660433e62ba021c452b4eac85d1f947ccb64e040738c58500e2e87768f171f1465f3df7a1589c0db96424479e13b8e2f3c79a87ce1e5b69cc2ae30cd3465c038c95442c1b96a826276d5df815ae61b500f798e2ce5c2b5fe61718eeec5eb815b2e164b5b20fac7ac823e34c3c228c284389acef475"}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0xa}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x9}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x12}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x1}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x67}]}, 0x124}, 0x1, 0x0, 0x0, 0x40880}, 0x40) mkdirat$cgroup(0xffffffffffffffff, &(0x7f0000001800)='syz1\x00', 0x1ff) 15:47:14 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, 0x0}, 0x0) 15:47:14 executing program 4: socketpair(0x10, 0x0, 0x0, 0x0) 15:47:14 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:47:14 executing program 4: socketpair(0x10, 0x0, 0x0, 0x0) 15:47:14 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:47:14 executing program 6: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802201}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24040044}, 0x4) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x8, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x404, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x48180) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffe0}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) r1 = accept(r0, &(0x7f0000000580)=@ax25={{0x3, @netrom}, [@null, @netrom, @remote, @remote, @remote, @null, @default]}, &(0x7f0000000600)=0x80) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004003}, 0x4000004) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000940)={'vcan0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8001}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd0, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x9, 0x9, 0x3, 0x2eff, 0x4466719c, 0xb294]}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5c88f91d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffff564}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x881c368}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25ac6fcc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x1c}}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) 15:47:14 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:47:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r2, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x20, 0x7, 0xa, 0x801, 0x0, 0x0, {0xd, 0x0, 0x9}, [@NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x400) r3 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:47:14 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 15:47:14 executing program 4: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802201}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24040044}, 0x4) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x8, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x404, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x48180) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffe0}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) r1 = accept(r0, &(0x7f0000000580)=@ax25={{0x3, @netrom}, [@null, @netrom, @remote, @remote, @remote, @null, @default]}, &(0x7f0000000600)=0x80) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004003}, 0x4000004) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000940)={'vcan0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8001}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd0, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x9, 0x9, 0x3, 0x2eff, 0x4466719c, 0xb294]}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5c88f91d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffff564}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x881c368}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25ac6fcc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x1c}}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) 15:47:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:47:27 executing program 5: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802201}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24040044}, 0x4) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x8, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x404, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x48180) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffe0}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) r1 = accept(r0, &(0x7f0000000580)=@ax25={{0x3, @netrom}, [@null, @netrom, @remote, @remote, @remote, @null, @default]}, &(0x7f0000000600)=0x80) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004003}, 0x4000004) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000940)={'vcan0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8001}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd0, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x9, 0x9, 0x3, 0x2eff, 0x4466719c, 0xb294]}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5c88f91d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffff564}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x881c368}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25ac6fcc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x1c}}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) 15:47:27 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) 15:47:27 executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000001b00)=""/231, 0xe7}], 0x1, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) 15:47:27 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) 15:47:27 executing program 4: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802201}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24040044}, 0x4) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x8, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x404, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x48180) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffe0}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) r1 = accept(r0, &(0x7f0000000580)=@ax25={{0x3, @netrom}, [@null, @netrom, @remote, @remote, @remote, @null, @default]}, &(0x7f0000000600)=0x80) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004003}, 0x4000004) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000940)={'vcan0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8001}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd0, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x9, 0x9, 0x3, 0x2eff, 0x4466719c, 0xb294]}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5c88f91d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffff564}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x881c368}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25ac6fcc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x1c}}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) 15:47:27 executing program 0: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802201}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24040044}, 0x4) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x8, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x404, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x48180) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffe0}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) r1 = accept(r0, &(0x7f0000000580)=@ax25={{0x3, @netrom}, [@null, @netrom, @remote, @remote, @remote, @null, @default]}, &(0x7f0000000600)=0x80) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004003}, 0x4000004) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000940)={'vcan0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8001}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd0, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x9, 0x9, 0x3, 0x2eff, 0x4466719c, 0xb294]}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5c88f91d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffff564}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x881c368}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25ac6fcc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x1c}}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) 15:47:27 executing program 6: socketpair(0x29, 0x800, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x814) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xa01, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000012) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat$cgroup_type(r2, &(0x7f0000000240), 0x2, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb9b}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x29}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_EXP={0x54, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3f}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0xdb, 0xa, "a19fed657835a581aa88e9c36fff73d013e9e7da2b4cb3a4bab27ffdd914e56e030a4386e50642faf51aecefd01927053079d7e0666ae9a408fed1a0c6fbf42e2f260bf05ebaaa5d69e0295bbafa3e30f30caeaa3885336e8361222a6f002d249ebb02832c9e73a6555950ac19fc156e68e7e6b9c7528442962a4e6961dbabf94c91b1f0669adb920749fa720535bc5bd2dcc3549b2a376d36f5be28b3f1e7be5a3155eb423e23c30beac582679e0fe41aa707a6af48f83caf3656c2bf90f5c9ef02d006d71c740351dcd81001559d2d1be6a175fac847"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3f}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}]}]}, 0x178}}, 0x14) mkdirat$cgroup(r2, &(0x7f0000000780)='syz0\x00', 0x1ff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008040}, 0x4881) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000b40)={0x0, 0x1}) socketpair(0x1f, 0xa, 0x7, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x43865737}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000d40), 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c850}, 0x4c0c0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 15:47:27 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40002104) 15:47:27 executing program 3: socketpair(0x29, 0x800, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x814) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xa01, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000012) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat$cgroup_type(r2, &(0x7f0000000240), 0x2, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb9b}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x29}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_EXP={0x54, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3f}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0xdb, 0xa, "a19fed657835a581aa88e9c36fff73d013e9e7da2b4cb3a4bab27ffdd914e56e030a4386e50642faf51aecefd01927053079d7e0666ae9a408fed1a0c6fbf42e2f260bf05ebaaa5d69e0295bbafa3e30f30caeaa3885336e8361222a6f002d249ebb02832c9e73a6555950ac19fc156e68e7e6b9c7528442962a4e6961dbabf94c91b1f0669adb920749fa720535bc5bd2dcc3549b2a376d36f5be28b3f1e7be5a3155eb423e23c30beac582679e0fe41aa707a6af48f83caf3656c2bf90f5c9ef02d006d71c740351dcd81001559d2d1be6a175fac847"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3f}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}]}]}, 0x178}}, 0x14) mkdirat$cgroup(r2, &(0x7f0000000780)='syz0\x00', 0x1ff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008040}, 0x4881) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000b40)={0x0, 0x1}) socketpair(0x1f, 0xa, 0x7, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x43865737}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000d40), 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c850}, 0x4c0c0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 15:47:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x34, 0xf, 0x6, 0x101, 0x0, 0x0, {0x2, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x10) r2 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:47:28 executing program 7: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) 15:47:28 executing program 6: socketpair(0x29, 0x800, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x814) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xa01, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000012) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat$cgroup_type(r2, &(0x7f0000000240), 0x2, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb9b}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x29}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_EXP={0x54, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3f}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0xdb, 0xa, "a19fed657835a581aa88e9c36fff73d013e9e7da2b4cb3a4bab27ffdd914e56e030a4386e50642faf51aecefd01927053079d7e0666ae9a408fed1a0c6fbf42e2f260bf05ebaaa5d69e0295bbafa3e30f30caeaa3885336e8361222a6f002d249ebb02832c9e73a6555950ac19fc156e68e7e6b9c7528442962a4e6961dbabf94c91b1f0669adb920749fa720535bc5bd2dcc3549b2a376d36f5be28b3f1e7be5a3155eb423e23c30beac582679e0fe41aa707a6af48f83caf3656c2bf90f5c9ef02d006d71c740351dcd81001559d2d1be6a175fac847"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3f}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}]}]}, 0x178}}, 0x14) mkdirat$cgroup(r2, &(0x7f0000000780)='syz0\x00', 0x1ff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008040}, 0x4881) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000b40)={0x0, 0x1}) socketpair(0x1f, 0xa, 0x7, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x43865737}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000d40), 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c850}, 0x4c0c0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) 15:47:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40002104) 15:47:28 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000008c0)={&(0x7f0000002000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000900)=0x40) (fail_nth: 1) 15:47:28 executing program 0: sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x802201}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x58, 0x8, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000080}, 0x40) sendmsg$NFT_MSG_GETFLOWTABLE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x24040044}, 0x4) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x8, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}}, 0x800) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x4c, 0x0, 0x404, 0x70bd2b, 0x25dfdbfd, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6gre0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x48180) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x50, 0x3, 0x3, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x20}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xffffffe0}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x2}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffe, 0x3}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000000) r1 = accept(r0, &(0x7f0000000580)=@ax25={{0x3, @netrom}, [@null, @netrom, @remote, @remote, @remote, @null, @default]}, &(0x7f0000000600)=0x80) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x2c, 0x3, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x3}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x6}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffffa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x8010) r2 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) sendmsg$SMC_PNETID_ADD(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'bond0\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004003}, 0x4000004) sendmsg$IPCTNL_MSG_CT_GET_DYING(r1, &(0x7f0000000900)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x14, 0x6, 0x1, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x24008880}, 0x20000800) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000940)={'vcan0\x00'}) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r0, &(0x7f0000000ac0)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a80)={&(0x7f00000009c0)={0x90, 0x1, 0x8, 0x101, 0x0, 0x0, {0x1, 0x0, 0x2}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8863}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x800}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_ESTABLISHED={0x8, 0x4, 0x1, 0x0, 0x200}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x80000001}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_DATA={0x24, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_COOKIE_WAIT={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x8001}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x8001}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x14, 0xa, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000d80)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c40)={0xd0, 0x3, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x1}, [@CTA_LABELS={0x1c, 0x16, 0x1, 0x0, [0x9, 0x9, 0x3, 0x2eff, 0x4466719c, 0xb294]}, @CTA_STATUS={0x8}, @CTA_ZONE={0x6}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x5c88f91d}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x1}, @CTA_SYNPROXY={0x24, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0xfffff564}, @CTA_SYNPROXY_TSOFF={0x8, 0x3, 0x1, 0x0, 0x881c368}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_SYNPROXY_ISN={0x8, 0x1, 0x1, 0x0, 0x100}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0xffffffff}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x25ac6fcc}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x4}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7ff}]}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x4}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000e80)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x1c, 0x2, 0x3, 0x401, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_CFG_QUEUE_MAXLEN={0x8}]}, 0x1c}}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_GET(r1, &(0x7f0000000fc0)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000f00)={0x68, 0x1, 0x8, 0x201, 0x0, 0x0, {0x5, 0x0, 0x6}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x5}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0x14, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xff}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x4) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000010c0)={&(0x7f0000001000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001040)={0x20, 0x9, 0x6, 0x301, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x4) 15:47:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={&(0x7f0000001a80)=@nfc, 0x80, 0x0}, 0x0) (fail_nth: 1) 15:47:28 executing program 3: socketpair(0x29, 0x800, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x814) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xa01, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000012) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat$cgroup_type(r2, &(0x7f0000000240), 0x2, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb9b}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x29}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_EXP={0x54, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3f}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0xdb, 0xa, "a19fed657835a581aa88e9c36fff73d013e9e7da2b4cb3a4bab27ffdd914e56e030a4386e50642faf51aecefd01927053079d7e0666ae9a408fed1a0c6fbf42e2f260bf05ebaaa5d69e0295bbafa3e30f30caeaa3885336e8361222a6f002d249ebb02832c9e73a6555950ac19fc156e68e7e6b9c7528442962a4e6961dbabf94c91b1f0669adb920749fa720535bc5bd2dcc3549b2a376d36f5be28b3f1e7be5a3155eb423e23c30beac582679e0fe41aa707a6af48f83caf3656c2bf90f5c9ef02d006d71c740351dcd81001559d2d1be6a175fac847"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3f}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}]}]}, 0x178}}, 0x14) mkdirat$cgroup(r2, &(0x7f0000000780)='syz0\x00', 0x1ff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008040}, 0x4881) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000b40)={0x0, 0x1}) socketpair(0x1f, 0xa, 0x7, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x43865737}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000d40), 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c850}, 0x4c0c0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) [ 2887.916175] FAULT_INJECTION: forcing a failure. [ 2887.916175] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2887.917954] CPU: 0 PID: 16092 Comm: syz-executor.5 Not tainted 6.0.0-rc1-next-20220819 #1 [ 2887.919100] BUG: sleeping function called from invalid context at kernel/locking/rwsem.c:1521 [ 2887.920300] in_atomic(): 0, irqs_disabled(): 1, non_block: 0, pid: 16092, name: syz-executor.5 [ 2887.921517] preempt_count: 0, expected: 0 [ 2887.922100] RCU nest depth: 0, expected: 0 [ 2887.922692] no locks held by syz-executor.5/16092. [ 2887.923388] irq event stamp: 330 [ 2887.923864] hardirqs last enabled at (329): [] __up_console_sem+0x78/0x80 [ 2887.925010] hardirqs last disabled at (330): [] dump_stack_lvl+0x2e/0xb3 [ 2887.926130] softirqs last enabled at (324): [] __irq_exit_rcu+0x11b/0x180 [ 2887.927254] softirqs last disabled at (319): [] __irq_exit_rcu+0x11b/0x180 [ 2887.928618] CPU: 0 PID: 16092 Comm: syz-executor.5 Not tainted 6.0.0-rc1-next-20220819 #1 [ 2887.945907] syz-executor.5[16092] cmdline: /syz-executor.5 exec [ 2887.946843] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2887.948499] Call Trace: [ 2887.948881] [ 2887.949289] dump_stack_lvl+0x8b/0xb3 [ 2887.949862] __might_resched.cold+0x222/0x26b [ 2887.950591] down_read_killable+0x75/0x490 [ 2887.951251] ? down_read_interruptible+0x490/0x490 [ 2887.951997] __access_remote_vm+0xac/0x6f0 [ 2887.952688] ? follow_phys+0x2c0/0x2c0 [ 2887.953307] ? do_raw_spin_lock+0x121/0x260 [ 2887.953965] ? rwlock_bug.part.0+0x90/0x90 [ 2887.954643] ? lock_release+0x3b2/0x750 [ 2887.955274] ? __up_console_sem+0x47/0x80 [ 2887.955910] get_mm_cmdline.part.0+0x214/0x600 [ 2887.956610] ? dname_to_vma_addr.isra.0+0x360/0x360 [ 2887.957397] ? _raw_spin_unlock_irqrestore+0x33/0x60 [ 2887.957726] FAULT_INJECTION: forcing a failure. [ 2887.957726] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 2887.958177] get_task_cmdline_kernel+0x1e9/0x230 [ 2887.960442] dump_stack_print_cmdline.part.0+0x82/0x150 [ 2887.961267] ? _atomic_dec_and_lock_irqsave+0x150/0x150 [ 2887.962033] ? __wake_up_klogd.part.0+0xc5/0xf0 [ 2887.962815] ? dump_stack_print_info+0xc6/0x190 [ 2887.963530] dump_stack_print_info+0x185/0x190 [ 2887.964237] dump_stack_lvl+0x7f/0xb3 [ 2887.964818] should_fail.cold+0x5/0xa [ 2887.965446] _copy_from_user+0x2a/0x170 [ 2887.966027] do_tcp_getsockopt.constprop.0+0xbc2/0x21a0 [ 2887.966832] ? tcp_recvmsg+0x640/0x640 [ 2887.967435] ? _parse_integer+0x30/0x30 [ 2887.968070] ? lock_is_held_type+0xd7/0x130 [ 2887.968733] ? find_held_lock+0x2c/0x110 [ 2887.969384] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2887.970185] ? lock_release+0x3b2/0x750 [ 2887.970795] ? get_pid_task+0xe8/0x210 [ 2887.971426] ? lock_is_held_type+0xd7/0x130 [ 2887.972064] ? find_held_lock+0x2c/0x110 [ 2887.972707] ? lock_release+0x3b2/0x750 [ 2887.973344] ? __fget_files+0x24e/0x450 [ 2887.973931] ? lock_downgrade+0x6d0/0x6d0 [ 2887.974565] ? selinux_socket_getsockopt+0x1fd/0x2b0 [ 2887.975345] ? selinux_socket_sendmsg+0x2b0/0x2b0 [ 2887.976056] ? lock_is_held_type+0xd7/0x130 [ 2887.976781] tcp_getsockopt+0xbc/0xd0 [ 2887.977399] ? sock_def_destruct+0x10/0x10 [ 2887.978027] __sys_getsockopt+0x14c/0x250 [ 2887.978689] ? __ia32_sys_setsockopt+0x150/0x150 [ 2887.979434] ? fput+0x2b/0x190 [ 2887.979963] __x64_sys_getsockopt+0xba/0x160 [ 2887.980670] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2887.981500] do_syscall_64+0x3b/0x90 [ 2887.982070] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2887.982869] RIP: 0033:0x7f5de4b70b19 [ 2887.983450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2887.986076] RSP: 002b:00007f5de20e6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2887.987208] RAX: ffffffffffffffda RBX: 00007f5de4c83f60 RCX: 00007f5de4b70b19 [ 2887.988280] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 2887.989347] RBP: 00007f5de20e61d0 R08: 0000000020000900 R09: 0000000000000000 [ 2887.990394] R10: 00000000200008c0 R11: 0000000000000246 R12: 0000000000000001 [ 2887.991448] R13: 00007ffc010ecd9f R14: 00007f5de20e6300 R15: 0000000000022000 [ 2887.992522] 15:47:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, 0x0, 0x40002104) 15:47:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0xf, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x4000890) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xc4, 0x0, 0x9, 0x5, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0xdf}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x18}}}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x2f}}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x20}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x6}]}, 0xc4}, 0x1, 0x0, 0x0, 0x80080}, 0xc000) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, 0x3, 0x2, 0x101, 0x0, 0x0, {0x5, 0x0, 0x7}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x84) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000003c0)={'b', ' *:* ', 'rw\x00'}, 0x9) openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000400)='devices.allow\x00', 0x2, 0x0) r1 = pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$SMC_PNETID_ADD(r1, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044080}, 0x20000000) sendmsg$NFNL_MSG_CTHELPER_NEW(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x6c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x401}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x5}}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0xa0}}, @NFCTH_NAME={0x9, 0x1, 'syz1\x00'}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x6a18}}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0x1b}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4}, 0x20000015) r2 = syz_open_dev$vcsu(&(0x7f0000000980), 0x40, 0x208000) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a00)={0xc4, 0x1, 0x1, 0xb02, 0x0, 0x0, {0x3, 0x0, 0x3}, [@CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xe, 0x1, 'irc-20000\x00'}}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x5b5}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x9be}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @local}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x60}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_TUPLE_ORIG={0x20, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @loopback}}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1002}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x29}]}, 0xc4}, 0x1, 0x0, 0x0, 0x10}, 0x4000090) 15:47:28 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmsg(r0, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001c40)=""/116, 0x74}, 0x40002104) [ 2888.192081] syz-executor.5[16092] cmdline: /syz-executor.5 exec [ 2888.193063] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2888.194651] Call Trace: [ 2888.195024] [ 2888.195382] dump_stack_lvl+0x8b/0xb3 [ 2888.195944] should_fail.cold+0x5/0xa [ 2888.196538] _copy_from_user+0x2a/0x170 [ 2888.197134] do_tcp_getsockopt.constprop.0+0xbc2/0x21a0 [ 2888.197903] ? tcp_recvmsg+0x640/0x640 [ 2888.198480] ? _parse_integer+0x30/0x30 [ 2888.199072] ? lock_is_held_type+0xd7/0x130 [ 2888.199725] ? find_held_lock+0x2c/0x110 [ 2888.200333] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 2888.201120] ? lock_release+0x3b2/0x750 [ 2888.201693] ? get_pid_task+0xe8/0x210 [ 2888.202307] ? lock_is_held_type+0xd7/0x130 [ 2888.202930] ? find_held_lock+0x2c/0x110 [ 2888.203536] ? lock_release+0x3b2/0x750 [ 2888.204141] ? __fget_files+0x24e/0x450 [ 2888.204715] ? lock_downgrade+0x6d0/0x6d0 [ 2888.205352] ? selinux_socket_getsockopt+0x1fd/0x2b0 [ 2888.206070] ? selinux_socket_sendmsg+0x2b0/0x2b0 [ 2888.206781] ? lock_is_held_type+0xd7/0x130 [ 2888.207462] tcp_getsockopt+0xbc/0xd0 [ 2888.208014] ? sock_def_destruct+0x10/0x10 [ 2888.208635] __sys_getsockopt+0x14c/0x250 [ 2888.209266] ? __ia32_sys_setsockopt+0x150/0x150 [ 2888.209983] ? fput+0x2b/0x190 [ 2888.210502] __x64_sys_getsockopt+0xba/0x160 [ 2888.211170] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.211913] do_syscall_64+0x3b/0x90 [ 2888.212487] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2888.213273] RIP: 0033:0x7f5de4b70b19 [ 2888.213807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.216319] RSP: 002b:00007f5de20e6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 2888.217400] RAX: ffffffffffffffda RBX: 00007f5de4c83f60 RCX: 00007f5de4b70b19 [ 2888.218408] RDX: 0000000000000023 RSI: 0000000000000006 RDI: 0000000000000003 [ 2888.219424] RBP: 00007f5de20e61d0 R08: 0000000020000900 R09: 0000000000000000 [ 2888.220431] R10: 00000000200008c0 R11: 0000000000000246 R12: 0000000000000001 [ 2888.221467] R13: 00007ffc010ecd9f R14: 00007f5de20e6300 R15: 0000000000022000 [ 2888.222498] [ 2888.222843] CPU: 1 PID: 16096 Comm: syz-executor.4 Tainted: G W 6.0.0-rc1-next-20220819 #1 15:47:28 executing program 6: socketpair(0x29, 0x800, 0x1000, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0xc, 0x0, 0x6}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x814) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x4, 0xa, 0xa01, 0x0, 0x0, {0x5, 0x0, 0x3}}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20000012) r2 = pidfd_getfd(0xffffffffffffffff, r0, 0x0) openat$cgroup_type(r2, &(0x7f0000000240), 0x2, 0x0) r3 = syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0), r0) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x54, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x101}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x4}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x10000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7f}]}, 0x54}, 0x1, 0x0, 0x0, 0x2000c800}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r2, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x64, 0x2, 0x3, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x20}, @NFQA_CFG_CMD={0x8, 0x1, {0x0, 0x0, 0x27}}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0xb9b}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x4}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x29}, @NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x3}}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x6}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x28}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) sendmsg$NFQNL_MSG_VERDICT(r2, &(0x7f0000000740)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)={0x178, 0x1, 0x3, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFQA_EXP={0x54, 0xf, 0x0, 0x1, [@CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_EXPECT_MASK={0x38, 0x3, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @local}}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x3f}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}]}, @NFQA_PAYLOAD={0xdb, 0xa, "a19fed657835a581aa88e9c36fff73d013e9e7da2b4cb3a4bab27ffdd914e56e030a4386e50642faf51aecefd01927053079d7e0666ae9a408fed1a0c6fbf42e2f260bf05ebaaa5d69e0295bbafa3e30f30caeaa3885336e8361222a6f002d249ebb02832c9e73a6555950ac19fc156e68e7e6b9c7528442962a4e6961dbabf94c91b1f0669adb920749fa720535bc5bd2dcc3549b2a376d36f5be28b3f1e7be5a3155eb423e23c30beac582679e0fe41aa707a6af48f83caf3656c2bf90f5c9ef02d006d71c740351dcd81001559d2d1be6a175fac847"}, @NFQA_VLAN={0x34, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x7ff}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0x3f}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x8100}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6}]}]}, 0x178}}, 0x14) mkdirat$cgroup(r2, &(0x7f0000000780)='syz0\x00', 0x1ff) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, 0x2, 0x7, 0x401, 0x0, 0x0, {0x2, 0x0, 0x9}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffffffff}]}, @NFACCT_PKTS={0xc}, @NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x3}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x4}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4008040}, 0x4881) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0xa, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40041}, 0x80) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x54, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000001}, 0x10) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000b40)={0x0, 0x1}) socketpair(0x1f, 0xa, 0x7, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFNL_MSG_ACCT_GET(r4, &(0x7f0000000cc0)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c00)={0x5c, 0x1, 0x7, 0x3, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FILTER={0x1c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x2}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x43865737}]}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008000) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000d00)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_freezer_state(r6, &(0x7f0000000d40), 0x2, 0x0) sendmsg$NFNL_MSG_CTHELPER_NEW(r5, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x1c, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x1f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c850}, 0x4c0c0) sendmsg$NFT_MSG_GETSETELEM(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f0000000ec0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000f40)={&(0x7f0000000f00)={0x1c, 0xd, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x40004) [ 2888.320899] syz-executor.4[16096] cmdline: /syz-executor.4 exec [ 2888.321673] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS rel-1.14.0-0-g155821a1990b-prebuilt.qemu.org 04/01/2014 [ 2888.322995] Call Trace: [ 2888.323333] [ 2888.323606] dump_stack_lvl+0x8b/0xb3 [ 2888.324074] should_fail.cold+0x5/0xa [ 2888.324569] _copy_from_user+0x2a/0x170 [ 2888.325044] copy_msghdr_from_user+0x89/0x150 [ 2888.325628] ? __copy_msghdr+0x4b0/0x4b0 [ 2888.326154] ? lock_is_held_type+0xd7/0x130 [ 2888.326681] ? find_held_lock+0x2c/0x110 [ 2888.327198] ___sys_recvmsg+0xbc/0x190 [ 2888.327670] ? copy_msghdr_from_user+0x150/0x150 [ 2888.328271] ? ksys_write+0x214/0x250 [ 2888.328741] ? __fget_files+0x270/0x450 [ 2888.329262] ? __fget_light+0xe5/0x280 [ 2888.329727] __sys_recvmsg+0xf0/0x1c0 [ 2888.330203] ? __sys_recvmsg_sock+0x50/0x50 [ 2888.330710] ? fput+0x2b/0x190 [ 2888.331132] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.331744] ? syscall_enter_from_user_mode+0x1d/0x50 [ 2888.332379] do_syscall_64+0x3b/0x90 [ 2888.332861] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 2888.333587] RIP: 0033:0x7fafe185fb19 [ 2888.334032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2888.336094] RSP: 002b:00007fafdedd5188 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 2888.336986] RAX: ffffffffffffffda RBX: 00007fafe1972f60 RCX: 00007fafe185fb19 [ 2888.337832] RDX: 0000000000000000 RSI: 0000000020001cc0 RDI: 0000000000000003 [ 2888.338667] RBP: 00007fafdedd51d0 R08: 0000000000000000 R09: 0000000000000000 [ 2888.339505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2888.340337] R13: 00007ffcefe7643f R14: 00007fafdedd5300 R15: 0000000000022000 [ 2888.341201] VM DIAGNOSIS: 15:47:28 Registers: info registers vcpu 0 RAX=000000000000003a RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff8240add1 RDI=ffffffff8762a6c0 RBP=ffffffff8762a680 RSP=ffff888037927020 R8 =0000000000000001 R9 =000000000000000a R10=000000000000003a R11=0000000000000001 R12=000000000000003a R13=ffffffff8762a680 R14=0000000000000010 R15=ffffffff8240adc0 RIP=ffffffff8240ae29 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f5de20e6700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f5de20e5f78 CR3=00000000181c2000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffff00 YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 info registers vcpu 1 RAX=0000000000000007 RBX=1ffff1100206ff48 RCX=ffffffff817060c5 RDX=0000000000000000 RSI=0000000000000008 RDI=ffff88807ffdc8d8 RBP=ffff88807ffdc500 RSP=ffff88801037fa18 R8 =ffff88806cf3d600 R9 =1ffffd40001ba26a R10=fffffbfff0b5daca R11=0000000000000001 R12=ffff88806cf3d5c0 R13=000000000000034d R14=0000000000000001 R15=ffff88801037fa80 RIP=ffffffff817892b4 RFL=00000006 [-----P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 0000000000000000 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=000055c1dfdd70e0 CR3=0000000029418000 CR4=00350ee0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 YMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM01=0000000000000000 0000000000000000 ffffffffffffffff ffffffffffffffff YMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM04=0000000000000000 0000000000000000 0000000000000000 00000000000000ff YMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM06=0000000000000000 0000000000000000 0000000000000000 000000524f525245 YMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM08=0000000000000000 0000000000000000 0000000000000000 00524f5252450040 YMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 YMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000