e4b75afa82e17b6165ad50564132919116c541492d521cbf5047d321f1ea17a026b37dc24abcbdb11853c2fc6459691e9b8dd5f0062af27975b8ea79800ed7dee504873a835e3ccc33d8a3554746a17862c87fa06bf7749ef29f501ee7e393194667a8d4a0b1493fa6052767d4d", 0x8b) (async) 02:10:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:10:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:19 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xfffffff5, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:10:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, 0x1c) 02:10:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0xb}, 0xd}, 0x1c) 02:10:19 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121a02, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8000900, 0x12) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2122c1, 0x0) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x1) 02:10:19 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121a02, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8000900, 0x12) (async) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2122c1, 0x0) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x1) 02:10:19 executing program 0: r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121a02, 0x0) write$cgroup_int(r0, &(0x7f0000000000)=0x8000900, 0x12) r1 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2122c1, 0x0) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x1) openat$sysfs(0xffffffffffffff9c, &(0x7f0000001580)='/sys/power/resume', 0x121a02, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000000)=0x8000900, 0x12) (async) openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000040), 0x2122c1, 0x0) (async) mknodat$loop(r1, &(0x7f0000000080)='./file0\x00', 0x2, 0x1) (async) 02:10:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x20, 0x15, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4000040003, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x0, 0x8, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000240)={r6}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r7, r5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x5, 0x7, 0x4}) dup3(r2, r0, 0x0) 02:10:19 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x20, 0x15, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4000040003, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x0, 0x8, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000240)={r6}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r7, r5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x5, 0x7, 0x4}) dup3(r2, r0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x20, 0x15, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r1}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) pipe(&(0x7f0000000040)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r4) (async) splice(r3, 0x0, r4, 0x0, 0x4000040003, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x0, 0x8, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000240)={r6}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) dup3(r7, r5, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x5, 0x7, 0x4}) (async) dup3(r2, r0, 0x0) (async) [ 495.747222][ T3682] usb 6-1: new full-speed USB device number 42 using dummy_hcd [ 496.147274][ T3682] usb 6-1: not running at top speed; connect to a high speed hub [ 496.227282][ T3682] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 496.227322][ T3682] usb 6-1: config 1 interface 0 has no altsetting 0 [ 496.587209][ T3682] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 496.587244][ T3682] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.607398][T10416] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 496.927473][ T3682] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 496.936736][ T3682] usb 6-1: USB disconnect, device number 42 02:10:21 executing program 5: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) ioctl$HIDIOCGFEATURE(r0, 0xc0404807, &(0x7f0000000400)={0x0, "1bf8d073032388bdb6560775a96a16ca85f319a43d7eab96e55f2566b022a5ecf72c31297dbc6330e67e6e04fd42fab4e5097701047ef9107e8839dc34329b2c"}) set_tid_address(0x0) (async, rerun: 32) syz_usb_connect$cdc_ecm(0x2, 0xe0, &(0x7f0000000600)={{0x12, 0x1, 0x310, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xce, 0x1, 0x1, 0x2, 0x0, 0x5, [{{0x9, 0x4, 0x0, 0x4, 0x2, 0x2, 0x6, 0x0, 0x1b, {{0xa, 0x24, 0x6, 0x0, 0x0, "85868c29aa"}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0x0, 0x8000, 0x6b74, 0x1f}, [@network_terminal={0x7, 0x24, 0xa, 0xd8, 0x1, 0x4, 0x1}, @dmm={0x7, 0x24, 0x14, 0x9, 0x5}, @mdlm_detail={0x74, 0x24, 0x13, 0x1f, "af6b07edab0c81cb69545846d0756f9b988115afde5202ae317217715dbd0b260ba507f56abfd6c7f5164253a85c528ba9061a301c1e4b8512155efe94194d2a384b5ebfc763734f27ec54e72ede9f678c90780b7cf498841c3a8884f470924821d96326310a256b693bcc2f122910da"}, @obex={0x5, 0x24, 0x15, 0xff}, @dmm={0x7, 0x24, 0x14, 0x7ff, 0x2f53}]}, {[], {{0x9, 0x5, 0x82, 0x2, 0x200, 0x7f, 0x7, 0x7f}}, {{0x9, 0x5, 0x3, 0x2, 0x8, 0x1, 0xae, 0x81}}}}}]}}]}}, &(0x7f0000000a00)={0xa, &(0x7f0000000700)={0xa, 0x6, 0x300, 0x0, 0x3f, 0x3f, 0x20, 0x6c}, 0x13d, &(0x7f0000000740)={0x5, 0xf, 0x13d, 0x5, [@generic={0xa3, 0x10, 0xc, "c59b107488e4976cf875895e22c026708189945dc3d5752cf85692fb70ae6309a4dcf5cf8cdd15fd277ce4440297df35d16ca7ecaf1eae56bde272d62d4af3ed97f1ff44b27a723a27ca5788ec01cf1525964d89900e6e7d1c522a5f6ae78b9f337885a9662c7166df442da173d518886028b1843a644704c5c6a71dd02e18bc1499fb26b9e4ae68f35330a7e39f6da9e48d81be96401d5313848d19848ebf55"}, @ptm_cap={0x3}, @ptm_cap={0x3}, @generic={0x74, 0x10, 0x1, "00b5981b3c04ccb88f5befbf2245917cb60ce6dec6c65c0bae79e9b9e8c34811c7b663e67cda88042aa02f11397415b7da388a13f761db2345d25b0f6a9e183e61110df60715bd07fe35f92b40d4a8f568a910fca04009ed9d06346d59f357923b2385245a50fe704b9d42933991e10593"}, @generic={0x1b, 0x10, 0x2, "4eb88d29af0ff62110ce8d8122dd01f7334ab7ce02956658"}]}, 0x5, [{0x4, &(0x7f00000008c0)=@lang_id={0x4, 0x3, 0x81a}}, {0x4, &(0x7f0000000900)=@lang_id={0x4}}, {0x0, 0x0}, {0x4, &(0x7f0000000980)=@lang_id={0x4}}, {0x4, &(0x7f00000009c0)=@lang_id={0x4, 0x3, 0x4001}}]}) (rerun: 32) 02:10:21 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000), 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000000000), &(0x7f0000000240)=0x68) (async) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000780), 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4000000) (async) syz_clone(0x40000200, 0x0, 0x0, &(0x7f0000000400), &(0x7f0000000440), &(0x7f0000003a40)="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") (async, rerun: 32) getuid() (async, rerun: 32) getuid() (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000009c0)=[{{&(0x7f0000000080)=@file={0x9687d4c5dc7ff47d, './file0\x00'}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)="e61237dfa5199be907ed4dfef0b03422538c3e7e89e54ad491a9d14fcb4c2a68ece75101eb79dabf2c9ea5f809480f7755255f9caeb2a6a047027e89477b1414a4edbb8024e313d961b474a3110f09791557da5974d054962f09bf4f854144c212bd874db3929b6e26d216807a8ae0c25e2e9b5588884992d40c59f16528a0d772fbd7cd46a95cdf7318ae51d97a45558a0db95fdb84e844a9cc870a0cf18326963b028fe15fd3185ce4275b75024f13ec24a997a1bea4903fcfe949e9ef86b079e18ca64e440eef80a9", 0xca}, {0x0}, {0x0}], 0x3, 0x0, 0x0, 0x40000}}, {{&(0x7f0000000480)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000500)=[{&(0x7f00000016c0)="cab0ad95b3f67ded1f17e2d686212174118891d2df24fa5fd37e3894037e98277542d17938a03598e83adda5d20dde73b27dc76ba6dec589d2392ea68a9bac8b655d8f9b3af772e2c0a5c7e79e4ec080f25b5c9a9a852a46712cb3f2f61bd0331a7a9acc3db061819a775e388678247a7e72b085247463ebf03246edde1ef387bb01ee5ac4ec800dfb742a718b2df5a6ab552822dc668c835ce2a2c368f898e72d81", 0xa2}, {&(0x7f0000001780)="b04e781efb141b07d912b6cc75609ca27d6831d14d9c3f7c42143afa5d39a7f7183e5196ece623ea20d8b51296a1749839ceb2d11038e9e83af5bdea45d722501eb0b9ab108e14fe20ce850ef32eeddcdb292914928a28496747d6bc67d825bd9b162d158ec35f4bd865f5393d273ae92720317ad3f27268dfe24c216e093bb8fb5fa0d92e", 0x85}, {&(0x7f0000001840)="feed29491823335e640e68ea14e9102da93ad797dbdbf70411be69c60e5d91b93d228f2888fad32d3bf43a16bdd29864456d756b532a376be92059ce0ee74f95eced827bbea9e8b462df0fca2b7be6b3f9df5fce2433d0bfad77395ba0f7badc37b9a4ccde8fbc19a5d9f1eb5a6d011d6e3561472446207b09", 0x79}], 0x3, 0x0, 0x0, 0x880}}], 0x2, 0x40) (async) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x1) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = accept$alg(r1, 0x0, 0x0) setsockopt(r2, 0x5, 0x7fff, &(0x7f0000000280)="c99e39220ec4fd2cf57f980f4d679657e2937a0acc0f82f82de55ca9b06e4b75afa82e17b6165ad50564132919116c541492d521cbf5047d321f1ea17a026b37dc24abcbdb11853c2fc6459691e9b8dd5f0062af27975b8ea79800ed7dee504873a835e3ccc33d8a3554746a17862c87fa06bf7749ef29f501ee7e393194667a8d4a0b1493fa6052767d4d", 0x8b) 02:10:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:21 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x20, 0x15, 0x1, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r1}) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x4000040003, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x0, 0x8, 0x6}) r5 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000240)={r6}) r7 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) dup3(r7, r5, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x5, 0x7, 0x4}) dup3(r2, r0, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f00000000c0)={0x20, 0x15, 0x1}) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000240)) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r0, 0xc01064b3, &(0x7f0000000140)={r1}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) pipe(&(0x7f0000000040)) (async) socket$inet_udp(0x2, 0x2, 0x0) (async) close(r4) (async) splice(r3, 0x0, r4, 0x0, 0x4000040003, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r3, 0xc02064b2, &(0x7f0000000080)={0x0, 0x8, 0x6}) (async) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000200)={0xec9, 0x9, 0x6}) (async) ioctl$DRM_IOCTL_MODE_MAP_DUMB(r5, 0xc01064b3, &(0x7f0000000240)={r6}) (async) openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (async) dup3(r7, r5, 0x0) (async) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f0000000000)={0x5, 0x7, 0x4}) (async) dup3(r2, r0, 0x0) (async) 02:10:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, 0xd}, 0x1c) 02:10:21 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x6a77}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000040)) syz_clone(0x40201400, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 02:10:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x3773, &(0x7f00000005c0)={0x0, 0x15b7}, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)=',', 0x1, 0x11}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40042, 0x0) syz_io_uring_setup(0x2b04, &(0x7f00000000c0)={0x0, 0x9a0b, 0x2, 0x1, 0x33a, 0x0, r6}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x2, 0x4000, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000240)="c4c3796d62777f674d0fc76c0a00b9380200000f3266b8ab008ed8b805000000b9a92500000f01d90f01cb670f35c4612154be4e0000000f2043c4a121fa21", 0x3f}], 0x1, 0x50, &(0x7f00000002c0), 0x0) 02:10:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 497.687158][ T3681] usb 6-1: new full-speed USB device number 43 using dummy_hcd 02:10:21 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x6a77}) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000040)) (async) syz_clone(0x40201400, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 02:10:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:22 executing program 0: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x6a77}) (async) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000040)) syz_clone(0x40201400, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) [ 498.087525][ T3681] usb 6-1: not running at top speed; connect to a high speed hub [ 498.167511][ T3681] usb 6-1: config 1 interface 0 altsetting 4 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 498.167554][ T3681] usb 6-1: config 1 interface 0 has no altsetting 0 [ 498.527386][ T3681] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 498.527418][ T3681] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 498.555047][T10471] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 498.770306][T10471] UDC core: couldn't find an available UDC or it's busy: -16 [ 498.770321][T10471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 498.770501][T10471] UDC core: couldn't find an available UDC or it's busy: -16 [ 498.770510][T10471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 498.770728][T10471] UDC core: couldn't find an available UDC or it's busy: -16 [ 498.770743][T10471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 498.770959][T10471] UDC core: couldn't find an available UDC or it's busy: -16 [ 498.770968][T10471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 498.771180][T10471] UDC core: couldn't find an available UDC or it's busy: -16 [ 498.771188][T10471] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 498.867300][ T3681] cdc_ether: probe of 6-1:1.0 failed with error -71 [ 498.870653][ T3681] usb 6-1: USB disconnect, device number 43 02:10:23 executing program 5: r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000100)={0x0, 0x0}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) kcmp$KCMP_EPOLL_TFD(r0, r1, 0x7, 0xffffffffffffffff, &(0x7f0000000180)={0xffffffffffffffff, r2, 0x6a77}) r3 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) wait4(r3, &(0x7f0000000000), 0x8, &(0x7f0000000040)) syz_clone(0x40201400, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x0) 02:10:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) r2 = syz_io_uring_setup(0x3773, &(0x7f00000005c0)={0x0, 0x15b7}, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)=',', 0x1, 0x11}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40042, 0x0) syz_io_uring_setup(0x2b04, &(0x7f00000000c0)={0x0, 0x9a0b, 0x2, 0x1, 0x33a, 0x0, r6}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000000)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x2, 0x4000, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000240)="c4c3796d62777f674d0fc76c0a00b9380200000f3266b8ab008ed8b805000000b9a92500000f01d90f01cb670f35c4612154be4e0000000f2043c4a121fa21", 0x3f}], 0x1, 0x50, &(0x7f00000002c0), 0x0) 02:10:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0xf}, 0xd}, 0x1c) 02:10:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c) 02:10:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x3773, &(0x7f00000005c0)={0x0, 0x15b7}, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)=',', 0x1, 0x11}, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) r6 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40042, 0x0) syz_io_uring_setup(0x2b04, &(0x7f00000000c0)={0x0, 0x9a0b, 0x2, 0x1, 0x33a, 0x0, r6}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r7 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x2, 0x4000, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000240)="c4c3796d62777f674d0fc76c0a00b9380200000f3266b8ab008ed8b805000000b9a92500000f01d90f01cb670f35c4612154be4e0000000f2043c4a121fa21", 0x3f}], 0x1, 0x50, &(0x7f00000002c0), 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) (async) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) (async) syz_io_uring_setup(0x3773, &(0x7f00000005c0)={0x0, 0x15b7}, &(0x7f0000ff1000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200), &(0x7f0000000140)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000840)) (async) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, r5, 0x0, &(0x7f0000000040)=',', 0x1, 0x11}, 0x0) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async) io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080), 0x40042, 0x0) (async) syz_io_uring_setup(0x2b04, &(0x7f00000000c0)={0x0, 0x9a0b, 0x2, 0x1, 0x33a, 0x0, r6}, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000000180), &(0x7f00000001c0)) (async) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) (async) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f0000000000)) (async) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) (async) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, 0x0) (async) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000003c0)={0x0, 0x2, 0x4000, 0x1000, &(0x7f0000ff6000/0x1000)=nil}) (async) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) (async) syz_kvm_setup_cpu$x86(r1, r6, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000240)="c4c3796d62777f674d0fc76c0a00b9380200000f3266b8ab008ed8b805000000b9a92500000f01d90f01cb670f35c4612154be4e0000000f2043c4a121fa21", 0x3f}], 0x1, 0x50, &(0x7f00000002c0), 0x0) (async) 02:10:23 executing program 0: write$9p(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x84200, 0x0) 02:10:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:23 executing program 5: unshare(0x40000000) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, r0, 0x315c1000) unshare(0x40000) unshare(0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000280)=0x54) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000380)={'nat\x00'}, &(0x7f00000001c0)=0x54) 02:10:23 executing program 0: write$9p(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x50) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x84200, 0x0) write$9p(0xffffffffffffffff, 0x0, 0x0) (async) open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x50) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x84200, 0x0) (async) 02:10:23 executing program 0: write$9p(0xffffffffffffffff, 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x20000, 0x50) (async) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x84200, 0x0) 02:10:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:23 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) migrate_pages(0x0, 0x2, &(0x7f00000001c0)=0x7fffffff, &(0x7f0000000280)=0x94) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000003c0)={r2, 0x0, 0x800}) dup(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/34, 0x22}], 0x5, 0x1000, 0xfffffd28) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f00000007c0)={0x0, 0x0, 0x8, 0xfffffffc, 0xa, 0x0, r1}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000e92f0303042eae66c07d82c22ce588e0e7d9522f90bc5baa020001004000ffffbc0e1c00000000000000"], 0x11) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000140)='./file0\x00', 0x20) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="cedbe15b6e3589ebee29c3f0a18fcad8537130b767168ffb42ea7f65d45304792a7e8273212b08cdee190731a67a1a11b2cc9953e29c29cb8f7f2ee475a9372cd7f1b27f63bcd101ad6c7227535de701b98ca89035da8b", 0x57) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0xc, &(0x7f00000002c0)="b7d80100000000000080d30dbd76b2368a9c4f0fc9e7d32a1d006339a235"}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRESHEX, @ANYRES64=r1, @ANYRES32=r5, @ANYRESOCT=r0, @ANYRESDEC=r5], 0xffffff76) 02:10:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0xd}, 0x1c) 02:10:24 executing program 5: unshare(0x40000000) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, r0, 0x315c1000) (async) unshare(0x40000) (async) unshare(0x0) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000280)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000380)={'nat\x00'}, &(0x7f00000001c0)=0x54) 02:10:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, 0x1c) 02:10:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x81) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) shutdown(0xffffffffffffffff, 0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c081) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 02:10:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 500.312942][T10584] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.370481][T10567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 500.423456][T10567] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 02:10:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) (async) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x81) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x1) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c081) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) (async) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) (async) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 02:10:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x81) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) (async) shutdown(0xffffffffffffffff, 0x1) (async, rerun: 32) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x406f408, 0x0) (async, rerun: 32) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x24, r3, 0x2, 0x70bd26, 0x25dfdbff, {{}, {}, {0x8, 0x11, 0x1}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000050}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x0, 0x8, 0x70bd2a, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x11}, 0x2000c081) (async) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r0, &(0x7f0000000580)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000040)={0x1c, r3, 0x400, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040010}, 0x1) (async, rerun: 64) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) (rerun: 64) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) (async) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 02:10:24 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) migrate_pages(0x0, 0x2, &(0x7f00000001c0)=0x7fffffff, &(0x7f0000000280)=0x94) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000003c0)={r2, 0x0, 0x800}) dup(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/34, 0x22}], 0x5, 0x1000, 0xfffffd28) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f00000007c0)={0x0, 0x0, 0x8, 0xfffffffc, 0xa, 0x0, r1}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000e92f0303042eae66c07d82c22ce588e0e7d9522f90bc5baa020001004000ffffbc0e1c00000000000000"], 0x11) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000140)='./file0\x00', 0x20) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="cedbe15b6e3589ebee29c3f0a18fcad8537130b767168ffb42ea7f65d45304792a7e8273212b08cdee190731a67a1a11b2cc9953e29c29cb8f7f2ee475a9372cd7f1b27f63bcd101ad6c7227535de701b98ca89035da8b", 0x57) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0xc, &(0x7f00000002c0)="b7d80100000000000080d30dbd76b2368a9c4f0fc9e7d32a1d006339a235"}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRESHEX, @ANYRES64=r1, @ANYRES32=r5, @ANYRESOCT=r0, @ANYRESDEC=r5], 0xffffff76) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) migrate_pages(0x0, 0x2, &(0x7f00000001c0)=0x7fffffff, &(0x7f0000000280)=0x94) (async) dup(r0) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000003c0)={r2, 0x0, 0x800}) (async) dup(0xffffffffffffffff) (async) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/34, 0x22}], 0x5, 0x1000, 0xfffffd28) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x3ede, &(0x7f00000007c0)={0x0, 0x0, 0x8, 0xfffffffc, 0xa, 0x0, r1}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8842, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000e92f0303042eae66c07d82c22ce588e0e7d9522f90bc5baa020001004000ffffbc0e1c00000000000000"], 0x11) (async) read$FUSE(r4, &(0x7f0000003440)={0x2020}, 0x2020) (async) creat(&(0x7f0000000140)='./file0\x00', 0x20) (async) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="cedbe15b6e3589ebee29c3f0a18fcad8537130b767168ffb42ea7f65d45304792a7e8273212b08cdee190731a67a1a11b2cc9953e29c29cb8f7f2ee475a9372cd7f1b27f63bcd101ad6c7227535de701b98ca89035da8b", 0x57) (async) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0xc, &(0x7f00000002c0)="b7d80100000000000080d30dbd76b2368a9c4f0fc9e7d32a1d006339a235"}) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRESHEX, @ANYRES64=r1, @ANYRES32=r5, @ANYRESOCT=r0, @ANYRESDEC=r5], 0xffffff76) (async) [ 500.797255][T10598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 02:10:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 500.898172][T10602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 02:10:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 02:10:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9}, 0x1c) 02:10:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) migrate_pages(0x0, 0x2, &(0x7f00000001c0)=0x7fffffff, &(0x7f0000000280)=0x94) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)=0x0) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000003c0)={r2, 0x0, 0x800}) dup(0xffffffffffffffff) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/34, 0x22}], 0x5, 0x1000, 0xfffffd28) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x3ede, &(0x7f00000007c0)={0x0, 0x0, 0x8, 0xfffffffc, 0xa, 0x0, r1}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8842, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000e92f0303042eae66c07d82c22ce588e0e7d9522f90bc5baa020001004000ffffbc0e1c00000000000000"], 0x11) read$FUSE(r4, &(0x7f0000003440)={0x2020, 0x0, 0x0, 0x0}, 0x2020) creat(&(0x7f0000000140)='./file0\x00', 0x20) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="cedbe15b6e3589ebee29c3f0a18fcad8537130b767168ffb42ea7f65d45304792a7e8273212b08cdee190731a67a1a11b2cc9953e29c29cb8f7f2ee475a9372cd7f1b27f63bcd101ad6c7227535de701b98ca89035da8b", 0x57) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0xc, &(0x7f00000002c0)="b7d80100000000000080d30dbd76b2368a9c4f0fc9e7d32a1d006339a235"}) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRESHEX, @ANYRES64=r1, @ANYRES32=r5, @ANYRESOCT=r0, @ANYRESDEC=r5], 0xffffff76) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000080), 0x2, 0x141101) (async) migrate_pages(0x0, 0x2, &(0x7f00000001c0)=0x7fffffff, &(0x7f0000000280)=0x94) (async) dup(r0) (async) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000380)) (async) ioctl$BINDER_FREEZE(r1, 0x400c620e, &(0x7f00000003c0)={r2, 0x0, 0x800}) (async) dup(0xffffffffffffffff) (async) preadv(0xffffffffffffffff, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/33, 0x21}, {&(0x7f0000000500)=""/178, 0xb2}, {&(0x7f00000005c0)=""/162, 0xa2}, {&(0x7f0000000680)=""/114, 0x72}, {&(0x7f0000000700)=""/34, 0x22}], 0x5, 0x1000, 0xfffffd28) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) syz_io_uring_setup(0x3ede, &(0x7f00000007c0)={0x0, 0x0, 0x8, 0xfffffffc, 0xa, 0x0, r1}, &(0x7f0000003000/0x3000)=nil, &(0x7f0000003000/0x2000)=nil, &(0x7f0000000040), &(0x7f0000000180)) (async) sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0), 0x8842, 0x0) (async) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000000)=0xd) (async) openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async) write$tun(r4, &(0x7f0000000340)=ANY=[@ANYBLOB="0000e92f0303042eae66c07d82c22ce588e0e7d9522f90bc5baa020001004000ffffbc0e1c00000000000000"], 0x11) (async) read$FUSE(r4, &(0x7f0000003440)={0x2020}, 0x2020) (async) creat(&(0x7f0000000140)='./file0\x00', 0x20) (async) write$hidraw(0xffffffffffffffff, &(0x7f0000000200)="cedbe15b6e3589ebee29c3f0a18fcad8537130b767168ffb42ea7f65d45304792a7e8273212b08cdee190731a67a1a11b2cc9953e29c29cb8f7f2ee475a9372cd7f1b27f63bcd101ad6c7227535de701b98ca89035da8b", 0x57) (async) ioctl$USBDEVFS_DISCSIGNAL(0xffffffffffffffff, 0x8010550e, &(0x7f0000000100)={0xc, &(0x7f00000002c0)="b7d80100000000000080d30dbd76b2368a9c4f0fc9e7d32a1d006339a235"}) (async) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000400)=ANY=[@ANYRESHEX=r5, @ANYRESHEX, @ANYRES64=r1, @ANYRES32=r5, @ANYRESOCT=r0, @ANYRESDEC=r5], 0xffffff76) (async) 02:10:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2}, 0x1c) [ 501.162803][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.162859][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 02:10:26 executing program 5: unshare(0x40000000) (async) r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000100), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8010, r0, 0x315c1000) (async) unshare(0x40000) (async, rerun: 32) unshare(0x0) (rerun: 32) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) r2 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 32) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f00000002c0)={'filter\x00'}, &(0x7f0000000280)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000000)={'security\x00'}, &(0x7f0000000080)=0x54) (async) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000380)={'nat\x00'}, &(0x7f00000001c0)=0x54) 02:10:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:26 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, 0x1c) 02:10:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xa}, 0x1c) 02:10:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3}, 0x1c) 02:10:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x17}, 0xd}, 0x1c) 02:10:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xb}, 0x1c) 02:10:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}, 0x1c) 02:10:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:27 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x64, 0xdd, 0x2, 0x10, 0x110a, 0x1653, 0xe231, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0xc6, 0x2e}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x99, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xac5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x6, 0x7}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x8, 0x0, 0x80, 0x10, 0x1}, 0x84, &(0x7f0000000480)={0x5, 0xf, 0x84, 0x5, [@generic={0x40, 0x10, 0x1, "7b9776e41d037d87b39976ca2cbca057fc79e24eaf34fca1b37937e6c77ff53653014cc682a0bf77cb3f2af43611e4cc5f6f21a5d72279aa66f5182c60"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x4, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x8, 0x1}, @generic={0x1a, 0x10, 0xa, "d77486cf801a4278fd16da41f58e354292b604eccdbdd2"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "774c9561a6d2dc155494d3e0df66990f"}]}, 0x3, [{0xa5, &(0x7f0000000540)=@string={0xa5, 0x3, "bf2c3d081c79fb4a506b897f50fcb75c624b41e5c48f3a10e79addba94294e9768103a6b1ffa00cd45843a155f0885b13507a2c8a20b551ec984e004b64ced6b65d031fb0b99a04cd03a46f461f36bf71ed85cf16198047fba4607c1be30118dad0f2082a28dd907eda84659f37562ede46e241d0f957a543b5a941e553967720a65b41b6336ceb9395e7a52fc0f4e77d65b895940067b21025bfa78b6ed8c3b41a49f"}}, {0x83, &(0x7f0000000600)=@string={0x83, 0x3, "6f34c73b840593624c943d754285ad3c0738b3e88758c22f377f2607d0f32fc757176eaa5806597ac7efce1c5f728a9e24df977d6c19f9502ec2663cc3597f841b929cf111378133ffa96f6c8b872bc054d44aec43140d8471b5a2a5e3c09773ac59d879719c3727927f59aac4f11099a4dcd64aa633e7bcc4a80b713d9b0a8946"}}, {0xe9, &(0x7f00000006c0)=@string={0xe9, 0x3, "84e969fde2a8050d9ed3508a9219a3c99e814abbaedf1760028dd5e973a72d371d7103aa9debd0660cdb78ebcc8e52b50ddef686e5214ee96605c689094f914cd65fb6b94c46ea8feb5124956af044d51a7a50efa9fbe1b0ad3188213a13901af9690ad7b89a21b55fd3f72f7348d3739d223dc0eb1079ce2c479c99d2de96b96b14eeda1b699e41a74a86e91715ebb8023516c5cc233dc17be38f09847a6a281839fb77a91a3de2d7fc26c73813827a7f04e0bc08fb7dfc526f03cc5fe14eb347c8b867186db81b0100e7ab26943f0a2e784c6a946be4c908b49f88eee55ff4489660a38be512"}}]}) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x40, 0xa, 0x83, {0x83, 0xa, "b19f9b225c718dde65bc664cb0f674ff4e4ccbd9cdbf86a193f48ca1dfcbb22eea0443f05b492399c2bc276d00547a9df2cd3201284d3c33a960173409ad29d8cba37899461e7b7855825e85715d9535ddb7b28a5ce68aaee3b89266db20698f919e797579d239ff5f37cec585912b9d57fdbab4dcfd92feb71ac723170030ee5d"}}, &(0x7f0000000100)={0x0, 0x3, 0x13, @string={0x13, 0x3, "4660ebaada3dfe8d094c09c6a89d2f3d10"}}, &(0x7f0000000140)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "961f6338"}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xf22}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0x8, 0xa0, "efdd315d64bdb4590948d7427eb6cadd88199996ebd1e17e09c2c31160e2d597e1e60c1d6d9d5e9bcf8fef3fbd6834927db0cdad1ed7cd7ba5a5cf992eb8b29bfaa73407ff4c26ea8091049507d210e4f1937b8c2a474cf48a30876de92bc2ac4b4c514adf1026b2b9e7cd70a4d7aeb2d54524411c0873e5d14aede8db384297a755911be2da6a77545db0226427da1b84227795d037a3baf412d537382fff77"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000340)={0x20, 0x1, 0x2f, "35fe86aed4b46dbd4f7d03f74bd5faafc3b24649d933a9df6448799fd7dd3f597307124a6c1a94a47281aea723c4c5"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x7}}) 02:10:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000004880)=ANY=[@ANYBLOB="10004b"], 0x106) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r0}}, 0x18) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) 02:10:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000004880)=ANY=[@ANYBLOB="10004b"], 0x106) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r0}}, 0x18) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) (async) write$tun(r0, &(0x7f0000004880)=ANY=[@ANYBLOB="10004b"], 0x106) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r0}}, 0x18) (async) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) (async) 02:10:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 504.197224][ T3682] usb 5-1: new high-speed USB device number 14 using dummy_hcd 02:10:28 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) write$tun(r0, &(0x7f0000004880)=ANY=[@ANYBLOB="10004b"], 0x106) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r0}}, 0x18) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x275a, 0x0) (async) write$tun(r0, &(0x7f0000004880)=ANY=[@ANYBLOB="10004b"], 0x106) (async) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) (async) ioctl$BTRFS_IOC_SCRUB_CANCEL(0xffffffffffffffff, 0x941c, 0x0) (async) socket$inet(0x2, 0x3, 0x2) (async) write$RDMA_USER_CM_CMD_MIGRATE_ID(r0, &(0x7f0000000080)={0x12, 0x10, 0xfa00, {&(0x7f0000000040), 0xffffffffffffffff, r0}}, 0x18) (async) setsockopt$inet_int(r1, 0x0, 0xca, &(0x7f0000000000), 0x10) (async) 02:10:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:10:28 executing program 5: r0 = getpid() syz_clone3(&(0x7f0000001680)={0x43002000, 0x0, 0x0, 0x0, {0x35}, &(0x7f0000001580)=""/13, 0xd, &(0x7f00000015c0)=""/88, &(0x7f0000001640)=[0x0, 0x0, 0x0], 0x3}, 0x58) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/98, 0x62}], 0x4, &(0x7f0000000780)=[{&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/180, 0xb4}], 0x3, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) syz_clone3(&(0x7f0000000200)={0x400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x5}, &(0x7f00000000c0)=""/122, 0x7a, &(0x7f0000000140)=""/108, &(0x7f00000001c0)=[r0, r1], 0x2}, 0x58) [ 504.467372][ T3682] usb 5-1: Using ep0 maxpacket: 16 02:10:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xc}, 0x1c) 02:10:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x5}, 0x1c) 02:10:28 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 504.777695][ T3682] usb 5-1: New USB device found, idVendor=110a, idProduct=1653, bcdDevice=e2.31 [ 504.777730][ T3682] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.777755][ T3682] usb 5-1: Product: syz [ 504.777774][ T3682] usb 5-1: Manufacturer: syz [ 504.777792][ T3682] usb 5-1: SerialNumber: syz [ 504.786248][ T3682] usb 5-1: config 0 descriptor?? [ 505.303184][ T3682] mxuport 5-1:0.0: Direct firmware load for moxa/moxa-1653.fw failed with error -2 [ 505.303203][ T3682] mxuport 5-1:0.0: Falling back to sysfs fallback for: moxa/moxa-1653.fw 02:10:29 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x64, 0xdd, 0x2, 0x10, 0x110a, 0x1653, 0xe231, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0xc6, 0x2e}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async, rerun: 32) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x99, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xac5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x6, 0x7}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x8, 0x0, 0x80, 0x10, 0x1}, 0x84, &(0x7f0000000480)={0x5, 0xf, 0x84, 0x5, [@generic={0x40, 0x10, 0x1, "7b9776e41d037d87b39976ca2cbca057fc79e24eaf34fca1b37937e6c77ff53653014cc682a0bf77cb3f2af43611e4cc5f6f21a5d72279aa66f5182c60"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x4, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x8, 0x1}, @generic={0x1a, 0x10, 0xa, "d77486cf801a4278fd16da41f58e354292b604eccdbdd2"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "774c9561a6d2dc155494d3e0df66990f"}]}, 0x3, [{0xa5, &(0x7f0000000540)=@string={0xa5, 0x3, "bf2c3d081c79fb4a506b897f50fcb75c624b41e5c48f3a10e79addba94294e9768103a6b1ffa00cd45843a155f0885b13507a2c8a20b551ec984e004b64ced6b65d031fb0b99a04cd03a46f461f36bf71ed85cf16198047fba4607c1be30118dad0f2082a28dd907eda84659f37562ede46e241d0f957a543b5a941e553967720a65b41b6336ceb9395e7a52fc0f4e77d65b895940067b21025bfa78b6ed8c3b41a49f"}}, {0x83, &(0x7f0000000600)=@string={0x83, 0x3, "6f34c73b840593624c943d754285ad3c0738b3e88758c22f377f2607d0f32fc757176eaa5806597ac7efce1c5f728a9e24df977d6c19f9502ec2663cc3597f841b929cf111378133ffa96f6c8b872bc054d44aec43140d8471b5a2a5e3c09773ac59d879719c3727927f59aac4f11099a4dcd64aa633e7bcc4a80b713d9b0a8946"}}, {0xe9, &(0x7f00000006c0)=@string={0xe9, 0x3, "84e969fde2a8050d9ed3508a9219a3c99e814abbaedf1760028dd5e973a72d371d7103aa9debd0660cdb78ebcc8e52b50ddef686e5214ee96605c689094f914cd65fb6b94c46ea8feb5124956af044d51a7a50efa9fbe1b0ad3188213a13901af9690ad7b89a21b55fd3f72f7348d3739d223dc0eb1079ce2c479c99d2de96b96b14eeda1b699e41a74a86e91715ebb8023516c5cc233dc17be38f09847a6a281839fb77a91a3de2d7fc26c73813827a7f04e0bc08fb7dfc526f03cc5fe14eb347c8b867186db81b0100e7ab26943f0a2e784c6a946be4c908b49f88eee55ff4489660a38be512"}}]}) (async, rerun: 32) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x40, 0xa, 0x83, {0x83, 0xa, "b19f9b225c718dde65bc664cb0f674ff4e4ccbd9cdbf86a193f48ca1dfcbb22eea0443f05b492399c2bc276d00547a9df2cd3201284d3c33a960173409ad29d8cba37899461e7b7855825e85715d9535ddb7b28a5ce68aaee3b89266db20698f919e797579d239ff5f37cec585912b9d57fdbab4dcfd92feb71ac723170030ee5d"}}, &(0x7f0000000100)={0x0, 0x3, 0x13, @string={0x13, 0x3, "4660ebaada3dfe8d094c09c6a89d2f3d10"}}, &(0x7f0000000140)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "961f6338"}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xf22}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0x8, 0xa0, "efdd315d64bdb4590948d7427eb6cadd88199996ebd1e17e09c2c31160e2d597e1e60c1d6d9d5e9bcf8fef3fbd6834927db0cdad1ed7cd7ba5a5cf992eb8b29bfaa73407ff4c26ea8091049507d210e4f1937b8c2a474cf48a30876de92bc2ac4b4c514adf1026b2b9e7cd70a4d7aeb2d54524411c0873e5d14aede8db384297a755911be2da6a77545db0226427da1b84227795d037a3baf412d537382fff77"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000340)={0x20, 0x1, 0x2f, "35fe86aed4b46dbd4f7d03f74bd5faafc3b24649d933a9df6448799fd7dd3f597307124a6c1a94a47281aea723c4c5"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x7}}) 02:10:29 executing program 5: r0 = getpid() (async) syz_clone3(&(0x7f0000001680)={0x43002000, 0x0, 0x0, 0x0, {0x35}, &(0x7f0000001580)=""/13, 0xd, &(0x7f00000015c0)=""/88, &(0x7f0000001640)=[0x0, 0x0, 0x0], 0x3}, 0x58) (async) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/98, 0x62}], 0x4, &(0x7f0000000780)=[{&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/180, 0xb4}], 0x3, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) (async) syz_clone3(&(0x7f0000000200)={0x400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x5}, &(0x7f00000000c0)=""/122, 0x7a, &(0x7f0000000140)=""/108, &(0x7f00000001c0)=[r0, r1], 0x2}, 0x58) 02:10:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:10:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xf}, 0x1c) 02:10:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:30 executing program 5: r0 = getpid() syz_clone3(&(0x7f0000001680)={0x43002000, 0x0, 0x0, 0x0, {0x35}, &(0x7f0000001580)=""/13, 0xd, &(0x7f00000015c0)=""/88, &(0x7f0000001640)=[0x0, 0x0, 0x0], 0x3}, 0x58) (async) process_vm_readv(0x0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/243, 0xf3}, {&(0x7f0000000380)=""/4, 0x4}, {&(0x7f00000003c0)=""/127, 0x7f}, {&(0x7f0000000440)=""/98, 0x62}], 0x4, &(0x7f0000000780)=[{&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/180, 0xb4}], 0x3, 0x0) (async) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000001700)=0x4) (async) syz_clone3(&(0x7f0000000200)={0x400, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x5}, &(0x7f00000000c0)=""/122, 0x7a, &(0x7f0000000140)=""/108, &(0x7f00000001c0)=[r0, r1], 0x2}, 0x58) 02:10:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x7}, 0x1c) 02:10:32 executing program 4: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x64, 0xdd, 0x2, 0x10, 0x110a, 0x1653, 0xe231, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0xc6, 0x2e}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_connect$hid(0x6, 0x36, &(0x7f0000000400)={{0x12, 0x1, 0x300, 0x0, 0x0, 0x0, 0xff, 0x56e, 0xfd, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0xf7, 0x90, 0x6, [{{0x9, 0x4, 0x0, 0x1, 0x2, 0x3, 0x1, 0x0, 0x99, {0x9, 0x21, 0x4, 0x80, 0x1, {0x22, 0xac5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200, 0x1, 0x6, 0x7}}}}}]}}]}}, &(0x7f00000007c0)={0xa, &(0x7f0000000440)={0xa, 0x6, 0x110, 0x8, 0x0, 0x80, 0x10, 0x1}, 0x84, &(0x7f0000000480)={0x5, 0xf, 0x84, 0x5, [@generic={0x40, 0x10, 0x1, "7b9776e41d037d87b39976ca2cbca057fc79e24eaf34fca1b37937e6c77ff53653014cc682a0bf77cb3f2af43611e4cc5f6f21a5d72279aa66f5182c60"}, @ext_cap={0x7, 0x10, 0x2, 0x2, 0x9, 0x4, 0x100}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0x8, 0x3, 0x8, 0x1}, @generic={0x1a, 0x10, 0xa, "d77486cf801a4278fd16da41f58e354292b604eccdbdd2"}, @ss_container_id={0x14, 0x10, 0x4, 0x3, "774c9561a6d2dc155494d3e0df66990f"}]}, 0x3, [{0xa5, &(0x7f0000000540)=@string={0xa5, 0x3, "bf2c3d081c79fb4a506b897f50fcb75c624b41e5c48f3a10e79addba94294e9768103a6b1ffa00cd45843a155f0885b13507a2c8a20b551ec984e004b64ced6b65d031fb0b99a04cd03a46f461f36bf71ed85cf16198047fba4607c1be30118dad0f2082a28dd907eda84659f37562ede46e241d0f957a543b5a941e553967720a65b41b6336ceb9395e7a52fc0f4e77d65b895940067b21025bfa78b6ed8c3b41a49f"}}, {0x83, &(0x7f0000000600)=@string={0x83, 0x3, "6f34c73b840593624c943d754285ad3c0738b3e88758c22f377f2607d0f32fc757176eaa5806597ac7efce1c5f728a9e24df977d6c19f9502ec2663cc3597f841b929cf111378133ffa96f6c8b872bc054d44aec43140d8471b5a2a5e3c09773ac59d879719c3727927f59aac4f11099a4dcd64aa633e7bcc4a80b713d9b0a8946"}}, {0xe9, &(0x7f00000006c0)=@string={0xe9, 0x3, "84e969fde2a8050d9ed3508a9219a3c99e814abbaedf1760028dd5e973a72d371d7103aa9debd0660cdb78ebcc8e52b50ddef686e5214ee96605c689094f914cd65fb6b94c46ea8feb5124956af044d51a7a50efa9fbe1b0ad3188213a13901af9690ad7b89a21b55fd3f72f7348d3739d223dc0eb1079ce2c479c99d2de96b96b14eeda1b699e41a74a86e91715ebb8023516c5cc233dc17be38f09847a6a281839fb77a91a3de2d7fc26c73813827a7f04e0bc08fb7dfc526f03cc5fe14eb347c8b867186db81b0100e7ab26943f0a2e784c6a946be4c908b49f88eee55ff4489660a38be512"}}]}) (async) syz_usb_control_io$hid(r0, &(0x7f00000001c0)={0x24, &(0x7f0000000040)={0x40, 0xa, 0x83, {0x83, 0xa, "b19f9b225c718dde65bc664cb0f674ff4e4ccbd9cdbf86a193f48ca1dfcbb22eea0443f05b492399c2bc276d00547a9df2cd3201284d3c33a960173409ad29d8cba37899461e7b7855825e85715d9535ddb7b28a5ce68aaee3b89266db20698f919e797579d239ff5f37cec585912b9d57fdbab4dcfd92feb71ac723170030ee5d"}}, &(0x7f0000000100)={0x0, 0x3, 0x13, @string={0x13, 0x3, "4660ebaada3dfe8d094c09c6a89d2f3d10"}}, &(0x7f0000000140)={0x0, 0x22, 0x6, {[@global=@item_4={0x3, 0x1, 0x0, "961f6338"}, @global=@item_012={0x0, 0x1, 0x2}]}}, &(0x7f0000000180)={0x0, 0x21, 0x9, {0x9, 0x21, 0x2, 0x6, 0x1, {0x22, 0xf22}}}}, &(0x7f00000003c0)={0x2c, &(0x7f0000000200)={0x20, 0x8, 0xa0, "efdd315d64bdb4590948d7427eb6cadd88199996ebd1e17e09c2c31160e2d597e1e60c1d6d9d5e9bcf8fef3fbd6834927db0cdad1ed7cd7ba5a5cf992eb8b29bfaa73407ff4c26ea8091049507d210e4f1937b8c2a474cf48a30876de92bc2ac4b4c514adf1026b2b9e7cd70a4d7aeb2d54524411c0873e5d14aede8db384297a755911be2da6a77545db0226427da1b84227795d037a3baf412d537382fff77"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0x6}, &(0x7f0000000300)={0x0, 0x8, 0x1, 0xfd}, &(0x7f0000000340)={0x20, 0x1, 0x2f, "35fe86aed4b46dbd4f7d03f74bd5faafc3b24649d933a9df6448799fd7dd3f597307124a6c1a94a47281aea723c4c5"}, &(0x7f0000000380)={0x20, 0x3, 0x1, 0x7}}) 02:10:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10}, 0x1c) 02:10:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:32 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x8}, 0x1c) 02:10:32 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:33 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:33 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x9}, 0x1c) 02:10:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x11}, 0x1c) 02:10:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:36 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xa}, 0x1c) 02:10:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:36 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:36 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:36 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x12}, 0x1c) 02:10:36 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xb}, 0x1c) 02:10:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:37 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x4}, 0x1c) 02:10:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:37 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:37 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:37 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x14}, 0x1c) 02:10:37 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xc}, 0x1c) 02:10:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:38 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:38 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x17}, 0x1c) 02:10:38 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:38 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xf}, 0x1c) 02:10:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:38 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x0) 02:10:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x0) 02:10:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)={0x1c, 0x5a, 0x1, 0x0, 0x0, "", [@nested={0xc, 0x0, 0x0, 0x1, [@typed={0x8, 0x1, 0x0, 0x0, @fd}]}]}, 0x1c}], 0x1}, 0x0) 02:10:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x18}, 0x1c) 02:10:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:39 executing program 4: socketpair(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 02:10:39 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x10}, 0x1c) 02:10:39 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:39 executing program 4: socketpair(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) 02:10:39 executing program 4: socketpair(0x2b, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) socketpair(0x2b, 0x1, 0x0, &(0x7f0000000080)) (async) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r0, 0x28, 0x6, &(0x7f0000000000)={0x0, 0x2710}, 0x10) (async) 02:10:39 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:39 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:39 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r3, 0x2, &(0x7f0000000580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000100)="91c8222ea5", 0x5, 0x7fffffffffffffff}]) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = dup3(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000740)=ANY=[@ANYBLOB="0100080001000067c6b99900", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./cgroup.cpu/cpuset.cpus\x00']) io_submit(r3, 0x7, &(0x7f0000000800)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xe000, r4, &(0x7f0000000080)="04ff50b671490e4d91ddcf2a056143896e40cd1a752c05d948ef5ef73124aec2b6054cb233c06a7eef973cac8447880f98f740b1f977e536784ea03ec3a3d6c3555004f348a21dea31f380c37d0642ed3c4820acbe1a75393be44ce10a62d192f601df62184da8ff5d54e023175e5974f87f6c9390c4194f94417900488652e9d5b4abc344f9162cab36f9a1ae2c7966a2991c44ec2e60ce528c41d2f3a4bce89ba1f88db60562c795", 0xa9, 0x48, 0x0, 0x3, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x20, r0, &(0x7f0000000340)="ccdddeb4dee2f470c27debcdf68345d0108159c31f2152bf582e2d2fa495b782d53d070780f51fe9b882f8ee9849dbb20b589d39e017a704a8b7d6c1bfc12c1d0c9af0fb320258735c0068cae25d293f073c8a6c747d0ac0be701dbe58619eb813da5047f5d7824942e671958929bc6879fd2abfdd4f56ccf35e9fd94890d2566cc1816f0f8d36c3ba014770a73a8dc234b23c5e7534ae0b246575a424517d66834fb658aa664e7644ff9137bf8dd24e46da0c37af2fd2c52bf4c759ce08882718dfeea95ef0d0c62929bc42b677ea0142b22a478e3b60c9a6c42aac68", 0xdd, 0x66, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x401, r0, &(0x7f0000000240)="c243204b55c1423b2288184d3e98815d9c14da36b331df4a547c88aeb0a2a98d60a58a62df1d647b58f343a9ad1ae4c8d8a5ba7e1e684449db891eb2c950d5768d1d1304e1739680caee22a420d6ac90161240c5c8f57e22a76ea935829367bd010c5a547b14a3f1479dbfca38c33f62b31ed7ee463fef3b9cdbba4aaad877726342ddf776f75def8fbad9e0a3fe9e519a15ef794d2842158b1c67929c7ca19b55a7595dce", 0xa5, 0x80000001, 0x0, 0x1, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x1a, r0, &(0x7f0000000580)="6e6cdcf612b36572dcee7592603a7d967628989d325b9cc6090e80e5535e09d692eadac7aceddecac60af78a576c44788f1e38df4f0715e59fccf73cc1ca5983d147717099b1f85a5f7f0eb7781c9025c32f8fb9961f4fd2d8d80a82eb7545f081cbca28798a6bd14a92ec58b97b326d5cae36b33db50276db430c2555aad204991c9c6882c08499e4f822ccef82fe8b8b720b830342b3c374a6ec3ebab7dc5786df54cbb283a8434886ff1f940740cac058d30890703e2e8785788ec5a24811588a0a4785af4cb91cb1bbd8e57b93f9d053f2", 0xd3, 0x7ff, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x7ff, r5, &(0x7f00000004c0)="2130a40939a4bdd1b3d756130b932b38f833e211e51a904321644892ab61298d79d1a9b5c336a5e3457080f3a90cc3586cfa6113bf076ed218f9022351a6d8709fd8749e83bef3c2467a786eeded17bb99d32d917f2a223bd7db729f56746109f4", 0x61, 0x6, 0x0, 0x3, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x1ff, r0, &(0x7f00000006c0), 0x0, 0x2395, 0x0, 0x0, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0xff, r7, &(0x7f0000000780)="d037915efa772d628f458db124532891fab01ee63307", 0x16, 0x0, 0x0, 0x3}]) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000300)='9', 0x1}]) 02:10:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x19}, 0x1c) 02:10:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:40 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) (async, rerun: 64) io_setup(0x6, &(0x7f0000000000)=0x0) (async, rerun: 64) r2 = socket$inet_udplite(0x2, 0x2, 0x88) (async) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r3, 0x2, &(0x7f0000000580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000100)="91c8222ea5", 0x5, 0x7fffffffffffffff}]) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) (async, rerun: 64) r6 = dup3(r0, r0, 0x0) (rerun: 64) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000740)=ANY=[@ANYBLOB="0100080001000067c6b99900", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./cgroup.cpu/cpuset.cpus\x00']) io_submit(r3, 0x7, &(0x7f0000000800)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xe000, r4, &(0x7f0000000080)="04ff50b671490e4d91ddcf2a056143896e40cd1a752c05d948ef5ef73124aec2b6054cb233c06a7eef973cac8447880f98f740b1f977e536784ea03ec3a3d6c3555004f348a21dea31f380c37d0642ed3c4820acbe1a75393be44ce10a62d192f601df62184da8ff5d54e023175e5974f87f6c9390c4194f94417900488652e9d5b4abc344f9162cab36f9a1ae2c7966a2991c44ec2e60ce528c41d2f3a4bce89ba1f88db60562c795", 0xa9, 0x48, 0x0, 0x3, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x20, r0, &(0x7f0000000340)="ccdddeb4dee2f470c27debcdf68345d0108159c31f2152bf582e2d2fa495b782d53d070780f51fe9b882f8ee9849dbb20b589d39e017a704a8b7d6c1bfc12c1d0c9af0fb320258735c0068cae25d293f073c8a6c747d0ac0be701dbe58619eb813da5047f5d7824942e671958929bc6879fd2abfdd4f56ccf35e9fd94890d2566cc1816f0f8d36c3ba014770a73a8dc234b23c5e7534ae0b246575a424517d66834fb658aa664e7644ff9137bf8dd24e46da0c37af2fd2c52bf4c759ce08882718dfeea95ef0d0c62929bc42b677ea0142b22a478e3b60c9a6c42aac68", 0xdd, 0x66, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x401, r0, &(0x7f0000000240)="c243204b55c1423b2288184d3e98815d9c14da36b331df4a547c88aeb0a2a98d60a58a62df1d647b58f343a9ad1ae4c8d8a5ba7e1e684449db891eb2c950d5768d1d1304e1739680caee22a420d6ac90161240c5c8f57e22a76ea935829367bd010c5a547b14a3f1479dbfca38c33f62b31ed7ee463fef3b9cdbba4aaad877726342ddf776f75def8fbad9e0a3fe9e519a15ef794d2842158b1c67929c7ca19b55a7595dce", 0xa5, 0x80000001, 0x0, 0x1, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x1a, r0, &(0x7f0000000580)="6e6cdcf612b36572dcee7592603a7d967628989d325b9cc6090e80e5535e09d692eadac7aceddecac60af78a576c44788f1e38df4f0715e59fccf73cc1ca5983d147717099b1f85a5f7f0eb7781c9025c32f8fb9961f4fd2d8d80a82eb7545f081cbca28798a6bd14a92ec58b97b326d5cae36b33db50276db430c2555aad204991c9c6882c08499e4f822ccef82fe8b8b720b830342b3c374a6ec3ebab7dc5786df54cbb283a8434886ff1f940740cac058d30890703e2e8785788ec5a24811588a0a4785af4cb91cb1bbd8e57b93f9d053f2", 0xd3, 0x7ff, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x7ff, r5, &(0x7f00000004c0)="2130a40939a4bdd1b3d756130b932b38f833e211e51a904321644892ab61298d79d1a9b5c336a5e3457080f3a90cc3586cfa6113bf076ed218f9022351a6d8709fd8749e83bef3c2467a786eeded17bb99d32d917f2a223bd7db729f56746109f4", 0x61, 0x6, 0x0, 0x3, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x1ff, r0, &(0x7f00000006c0), 0x0, 0x2395, 0x0, 0x0, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0xff, r7, &(0x7f0000000780)="d037915efa772d628f458db124532891fab01ee63307", 0x16, 0x0, 0x0, 0x3}]) (async, rerun: 64) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000300)='9', 0x1}]) (rerun: 64) 02:10:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:40 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x11}, 0x1c) 02:10:40 executing program 4: r0 = creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) io_setup(0x6, &(0x7f0000000000)=0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) io_setup(0x6, &(0x7f00000000c0)=0x0) io_submit(r3, 0x2, &(0x7f0000000580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000100)="91c8222ea5", 0x5, 0x7fffffffffffffff}]) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) r6 = dup3(r0, r0, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000740)=ANY=[@ANYBLOB="0100080001000067c6b99900", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./cgroup.cpu/cpuset.cpus\x00']) io_submit(r3, 0x7, &(0x7f0000000800)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xe000, r4, &(0x7f0000000080)="04ff50b671490e4d91ddcf2a056143896e40cd1a752c05d948ef5ef73124aec2b6054cb233c06a7eef973cac8447880f98f740b1f977e536784ea03ec3a3d6c3555004f348a21dea31f380c37d0642ed3c4820acbe1a75393be44ce10a62d192f601df62184da8ff5d54e023175e5974f87f6c9390c4194f94417900488652e9d5b4abc344f9162cab36f9a1ae2c7966a2991c44ec2e60ce528c41d2f3a4bce89ba1f88db60562c795", 0xa9, 0x48, 0x0, 0x3, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x20, r0, &(0x7f0000000340)="ccdddeb4dee2f470c27debcdf68345d0108159c31f2152bf582e2d2fa495b782d53d070780f51fe9b882f8ee9849dbb20b589d39e017a704a8b7d6c1bfc12c1d0c9af0fb320258735c0068cae25d293f073c8a6c747d0ac0be701dbe58619eb813da5047f5d7824942e671958929bc6879fd2abfdd4f56ccf35e9fd94890d2566cc1816f0f8d36c3ba014770a73a8dc234b23c5e7534ae0b246575a424517d66834fb658aa664e7644ff9137bf8dd24e46da0c37af2fd2c52bf4c759ce08882718dfeea95ef0d0c62929bc42b677ea0142b22a478e3b60c9a6c42aac68", 0xdd, 0x66, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x401, r0, &(0x7f0000000240)="c243204b55c1423b2288184d3e98815d9c14da36b331df4a547c88aeb0a2a98d60a58a62df1d647b58f343a9ad1ae4c8d8a5ba7e1e684449db891eb2c950d5768d1d1304e1739680caee22a420d6ac90161240c5c8f57e22a76ea935829367bd010c5a547b14a3f1479dbfca38c33f62b31ed7ee463fef3b9cdbba4aaad877726342ddf776f75def8fbad9e0a3fe9e519a15ef794d2842158b1c67929c7ca19b55a7595dce", 0xa5, 0x80000001, 0x0, 0x1, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x1a, r0, &(0x7f0000000580)="6e6cdcf612b36572dcee7592603a7d967628989d325b9cc6090e80e5535e09d692eadac7aceddecac60af78a576c44788f1e38df4f0715e59fccf73cc1ca5983d147717099b1f85a5f7f0eb7781c9025c32f8fb9961f4fd2d8d80a82eb7545f081cbca28798a6bd14a92ec58b97b326d5cae36b33db50276db430c2555aad204991c9c6882c08499e4f822ccef82fe8b8b720b830342b3c374a6ec3ebab7dc5786df54cbb283a8434886ff1f940740cac058d30890703e2e8785788ec5a24811588a0a4785af4cb91cb1bbd8e57b93f9d053f2", 0xd3, 0x7ff, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x7ff, r5, &(0x7f00000004c0)="2130a40939a4bdd1b3d756130b932b38f833e211e51a904321644892ab61298d79d1a9b5c336a5e3457080f3a90cc3586cfa6113bf076ed218f9022351a6d8709fd8749e83bef3c2467a786eeded17bb99d32d917f2a223bd7db729f56746109f4", 0x61, 0x6, 0x0, 0x3, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x1ff, r0, &(0x7f00000006c0), 0x0, 0x2395, 0x0, 0x0, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0xff, r7, &(0x7f0000000780)="d037915efa772d628f458db124532891fab01ee63307", 0x16, 0x0, 0x0, 0x3}]) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000300)='9', 0x1}]) creat(&(0x7f0000000140)='./cgroup.cpu/cpuset.cpus\x00', 0x0) (async) io_setup(0x6, &(0x7f0000000000)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) io_setup(0x6, &(0x7f00000000c0)) (async) io_submit(r3, 0x2, &(0x7f0000000580)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0}, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r2, &(0x7f0000000100)="91c8222ea5", 0x5, 0x7fffffffffffffff}]) (async) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) dup3(r0, r0, 0x0) (async) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r0, 0xc0189378, &(0x7f0000000740)=ANY=[@ANYBLOB="0100080001000067c6b99900", @ANYRES32=r0, @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00./cgroup.cpu/cpuset.cpus\x00']) (async) io_submit(r3, 0x7, &(0x7f0000000800)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x6, 0xe000, r4, &(0x7f0000000080)="04ff50b671490e4d91ddcf2a056143896e40cd1a752c05d948ef5ef73124aec2b6054cb233c06a7eef973cac8447880f98f740b1f977e536784ea03ec3a3d6c3555004f348a21dea31f380c37d0642ed3c4820acbe1a75393be44ce10a62d192f601df62184da8ff5d54e023175e5974f87f6c9390c4194f94417900488652e9d5b4abc344f9162cab36f9a1ae2c7966a2991c44ec2e60ce528c41d2f3a4bce89ba1f88db60562c795", 0xa9, 0x48, 0x0, 0x3, r0}, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x20, r0, &(0x7f0000000340)="ccdddeb4dee2f470c27debcdf68345d0108159c31f2152bf582e2d2fa495b782d53d070780f51fe9b882f8ee9849dbb20b589d39e017a704a8b7d6c1bfc12c1d0c9af0fb320258735c0068cae25d293f073c8a6c747d0ac0be701dbe58619eb813da5047f5d7824942e671958929bc6879fd2abfdd4f56ccf35e9fd94890d2566cc1816f0f8d36c3ba014770a73a8dc234b23c5e7534ae0b246575a424517d66834fb658aa664e7644ff9137bf8dd24e46da0c37af2fd2c52bf4c759ce08882718dfeea95ef0d0c62929bc42b677ea0142b22a478e3b60c9a6c42aac68", 0xdd, 0x66, 0x0, 0x2}, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x7, 0x401, r0, &(0x7f0000000240)="c243204b55c1423b2288184d3e98815d9c14da36b331df4a547c88aeb0a2a98d60a58a62df1d647b58f343a9ad1ae4c8d8a5ba7e1e684449db891eb2c950d5768d1d1304e1739680caee22a420d6ac90161240c5c8f57e22a76ea935829367bd010c5a547b14a3f1479dbfca38c33f62b31ed7ee463fef3b9cdbba4aaad877726342ddf776f75def8fbad9e0a3fe9e519a15ef794d2842158b1c67929c7ca19b55a7595dce", 0xa5, 0x80000001, 0x0, 0x1, r0}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x1a, r0, &(0x7f0000000580)="6e6cdcf612b36572dcee7592603a7d967628989d325b9cc6090e80e5535e09d692eadac7aceddecac60af78a576c44788f1e38df4f0715e59fccf73cc1ca5983d147717099b1f85a5f7f0eb7781c9025c32f8fb9961f4fd2d8d80a82eb7545f081cbca28798a6bd14a92ec58b97b326d5cae36b33db50276db430c2555aad204991c9c6882c08499e4f822ccef82fe8b8b720b830342b3c374a6ec3ebab7dc5786df54cbb283a8434886ff1f940740cac058d30890703e2e8785788ec5a24811588a0a4785af4cb91cb1bbd8e57b93f9d053f2", 0xd3, 0x7ff, 0x0, 0x1, r0}, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x2, 0x7ff, r5, &(0x7f00000004c0)="2130a40939a4bdd1b3d756130b932b38f833e211e51a904321644892ab61298d79d1a9b5c336a5e3457080f3a90cc3586cfa6113bf076ed218f9022351a6d8709fd8749e83bef3c2467a786eeded17bb99d32d917f2a223bd7db729f56746109f4", 0x61, 0x6, 0x0, 0x3, r6}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x3, 0x1ff, r0, &(0x7f00000006c0), 0x0, 0x2395, 0x0, 0x0, r0}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x5, 0xff, r7, &(0x7f0000000780)="d037915efa772d628f458db124532891fab01ee63307", 0x16, 0x0, 0x0, 0x3}]) (async) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000200)={0x101010, 0x400000000000, 0x0, 0x1, 0x0, r0, &(0x7f0000000300)='9', 0x1}]) (async) 02:10:40 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:40 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0)) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/175, 0xaf}], 0x3) r3 = openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0, 0x120) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x8, {{0x2, 0x4e21, @multicast2}}}, 0x88) dup(r3) lseek(r1, 0x8, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x2000, 0x0) 02:10:40 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:40 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:41 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1a}, 0x1c) 02:10:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:41 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x12}, 0x1c) 02:10:41 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:41 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) (async, rerun: 64) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) (async, rerun: 64) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0)) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) (async, rerun: 32) r1 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) (async) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/175, 0xaf}], 0x3) (async) r3 = openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0, 0x120) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x8, {{0x2, 0x4e21, @multicast2}}}, 0x88) (async) dup(r3) lseek(r1, 0x8, 0x0) (async, rerun: 32) openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x2000, 0x0) (rerun: 32) 02:10:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:41 executing program 4: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x8) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0)) ioctl$TCFLSH(r0, 0x540b, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) r2 = syz_open_dev$tty1(0xc, 0x4, 0x3) ioctl$TCFLSH(r2, 0x540b, 0x2) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/175, 0xaf}], 0x3) r3 = openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0, 0x120) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x8, {{0x2, 0x4e21, @multicast2}}}, 0x88) dup(r3) lseek(r1, 0x8, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x2000, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x8) (async) ioctl$TCFLSH(0xffffffffffffffff, 0x540b, 0x2) (async) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f0000000040)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) (async) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000080)) (async) ioctl$F2FS_IOC_ABORT_VOLATILE_WRITE(0xffffffffffffffff, 0xf505, 0x0) (async) ioctl$KDGETLED(r0, 0x4b31, &(0x7f00000000c0)) (async) ioctl$TCFLSH(r0, 0x540b, 0x0) (async) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)=0x6) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r1, 0x84009422, &(0x7f0000000140)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) (async) ioctl$AUTOFS_IOC_FAIL(r1, 0x9361, 0x2) (async) syz_open_dev$tty1(0xc, 0x4, 0x3) (async) ioctl$TCFLSH(r2, 0x540b, 0x2) (async) ioctl$TIOCMIWAIT(r2, 0x545c, 0x0) (async) readv(r1, &(0x7f0000000740)=[{&(0x7f0000000540)=""/183, 0xb7}, {&(0x7f0000000600)=""/109, 0x6d}, {&(0x7f0000000680)=""/175, 0xaf}], 0x3) (async) openat(0xffffffffffffffff, &(0x7f0000000780)='./file0\x00', 0x0, 0x120) (async) setsockopt$inet_MCAST_LEAVE_GROUP(r0, 0x0, 0x2d, &(0x7f00000007c0)={0x8, {{0x2, 0x4e21, @multicast2}}}, 0x88) (async) dup(r3) (async) lseek(r1, 0x8, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000880), 0x2000, 0x0) (async) 02:10:41 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:42 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1b}, 0x1c) 02:10:42 executing program 4: syz_usb_connect(0x0, 0x13c, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003ff984202104c90453230102030909022a01020000000009040000030202"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a97000205d0500905ff1010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x23, 0xa9, {0xa9, 0x46709bd412643e85, "9016ebfab65e6a145f11b578dc0e561806c86ad52d47c7ece0d7e9286901c10a50d1273cb0b0d319a0a162ba1ed01691486d6efbf9ea99266f6d0e93ea0d3dab8312352057dd540461d6fa93b5b084688b7efe9c74cbe8f104b20a6d8cec710141d8da484de2a03b0da13e951d13850593b19db733f1a63d425f7d4d2ceb19b8782ecee74bc14eb76d28b533fae13a77d198192415c015b90700c2e6c53541ddd1ba92b236499b"}}, &(0x7f0000000100)={0x0, 0x3, 0x48, @string={0x48, 0x3, "e5c4cfb5c1f7098faa15bafcfb2e2334af89b313c970138a775aa71bddb520bfadc273eaaf13b692a6e432a7263fbdcd593fbdaef92b92dc8774c1ea5aeda11b25a48ae0bd85"}}, &(0x7f0000000180)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x9, "48e2f938"}, @local=@item_4={0x3, 0x2, 0x0, "6d5ff783"}, @main=@item_4={0x3, 0x0, 0x6, "c76f0c10"}, @global=@item_4={0x3, 0x1, 0x6, "833b24c1"}, @main=@item_4={0x3, 0x0, 0xc, "4ba67dd2"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "471d6788"}, @global=@item_012={0x0, 0x1, 0x1}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x6, 0x1, {0x22, 0xd44}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x15, 0x14, "fe4129cfb65ed1c789d992d767a799cb45f54e8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x1, 0x90, "db5d5650b1e3a19452c7160749db2624384d8c335efe2673d9868eb873efb2c353b59c340a974eb3f5ed32d253e4dc1588ca3e90c0ff316581ef5c888962cf03cf3d6a650cdf9a99b642ff3bdd9363a45107b37a4d5d564efbf2536b690e5c9d0bd4d6124a71e0e18144005e02081ff6a6e36e73957763aac4be034479ade4a78692a0a1c4b40de04c2940429b3dc3b0"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x2}}) 02:10:42 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x14}, 0x1c) 02:10:42 executing program 5: bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:42 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:43 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1c}, 0x1c) 02:10:43 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x17}, 0x1c) 02:10:43 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1e}, 0x1c) 02:10:45 executing program 4: syz_usb_connect(0x0, 0x13c, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003ff984202104c90453230102030909022a01020000000009040000030202"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a97000205d0500905ff1010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x23, 0xa9, {0xa9, 0x46709bd412643e85, "9016ebfab65e6a145f11b578dc0e561806c86ad52d47c7ece0d7e9286901c10a50d1273cb0b0d319a0a162ba1ed01691486d6efbf9ea99266f6d0e93ea0d3dab8312352057dd540461d6fa93b5b084688b7efe9c74cbe8f104b20a6d8cec710141d8da484de2a03b0da13e951d13850593b19db733f1a63d425f7d4d2ceb19b8782ecee74bc14eb76d28b533fae13a77d198192415c015b90700c2e6c53541ddd1ba92b236499b"}}, &(0x7f0000000100)={0x0, 0x3, 0x48, @string={0x48, 0x3, "e5c4cfb5c1f7098faa15bafcfb2e2334af89b313c970138a775aa71bddb520bfadc273eaaf13b692a6e432a7263fbdcd593fbdaef92b92dc8774c1ea5aeda11b25a48ae0bd85"}}, &(0x7f0000000180)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x9, "48e2f938"}, @local=@item_4={0x3, 0x2, 0x0, "6d5ff783"}, @main=@item_4={0x3, 0x0, 0x6, "c76f0c10"}, @global=@item_4={0x3, 0x1, 0x6, "833b24c1"}, @main=@item_4={0x3, 0x0, 0xc, "4ba67dd2"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "471d6788"}, @global=@item_012={0x0, 0x1, 0x1}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x6, 0x1, {0x22, 0xd44}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x15, 0x14, "fe4129cfb65ed1c789d992d767a799cb45f54e8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x1, 0x90, "db5d5650b1e3a19452c7160749db2624384d8c335efe2673d9868eb873efb2c353b59c340a974eb3f5ed32d253e4dc1588ca3e90c0ff316581ef5c888962cf03cf3d6a650cdf9a99b642ff3bdd9363a45107b37a4d5d564efbf2536b690e5c9d0bd4d6124a71e0e18144005e02081ff6a6e36e73957763aac4be034479ade4a78692a0a1c4b40de04c2940429b3dc3b0"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x2}}) syz_usb_connect(0x0, 0x13c, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003ff984202104c90453230102030909022a01020000000009040000030202"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a97000205d0500905ff1010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x23, 0xa9, {0xa9, 0x46709bd412643e85, "9016ebfab65e6a145f11b578dc0e561806c86ad52d47c7ece0d7e9286901c10a50d1273cb0b0d319a0a162ba1ed01691486d6efbf9ea99266f6d0e93ea0d3dab8312352057dd540461d6fa93b5b084688b7efe9c74cbe8f104b20a6d8cec710141d8da484de2a03b0da13e951d13850593b19db733f1a63d425f7d4d2ceb19b8782ecee74bc14eb76d28b533fae13a77d198192415c015b90700c2e6c53541ddd1ba92b236499b"}}, &(0x7f0000000100)={0x0, 0x3, 0x48, @string={0x48, 0x3, "e5c4cfb5c1f7098faa15bafcfb2e2334af89b313c970138a775aa71bddb520bfadc273eaaf13b692a6e432a7263fbdcd593fbdaef92b92dc8774c1ea5aeda11b25a48ae0bd85"}}, &(0x7f0000000180)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x9, "48e2f938"}, @local=@item_4={0x3, 0x2, 0x0, "6d5ff783"}, @main=@item_4={0x3, 0x0, 0x6, "c76f0c10"}, @global=@item_4={0x3, 0x1, 0x6, "833b24c1"}, @main=@item_4={0x3, 0x0, 0xc, "4ba67dd2"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "471d6788"}, @global=@item_012={0x0, 0x1, 0x1}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x6, 0x1, {0x22, 0xd44}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x15, 0x14, "fe4129cfb65ed1c789d992d767a799cb45f54e8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x1, 0x90, "db5d5650b1e3a19452c7160749db2624384d8c335efe2673d9868eb873efb2c353b59c340a974eb3f5ed32d253e4dc1588ca3e90c0ff316581ef5c888962cf03cf3d6a650cdf9a99b642ff3bdd9363a45107b37a4d5d564efbf2536b690e5c9d0bd4d6124a71e0e18144005e02081ff6a6e36e73957763aac4be034479ade4a78692a0a1c4b40de04c2940429b3dc3b0"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x2}}) (async) 02:10:45 executing program 5: bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:45 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x22}, 0x1c) 02:10:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:45 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x18}, 0x1c) 02:10:45 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 02:10:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:10:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:10:45 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 02:10:45 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:48 executing program 4: syz_usb_connect(0x0, 0x13c, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003ff984202104c90453230102030909022a01020000000009040000030202"], 0x0) r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a97000205d0500905ff1010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x23, 0xa9, {0xa9, 0x46709bd412643e85, "9016ebfab65e6a145f11b578dc0e561806c86ad52d47c7ece0d7e9286901c10a50d1273cb0b0d319a0a162ba1ed01691486d6efbf9ea99266f6d0e93ea0d3dab8312352057dd540461d6fa93b5b084688b7efe9c74cbe8f104b20a6d8cec710141d8da484de2a03b0da13e951d13850593b19db733f1a63d425f7d4d2ceb19b8782ecee74bc14eb76d28b533fae13a77d198192415c015b90700c2e6c53541ddd1ba92b236499b"}}, &(0x7f0000000100)={0x0, 0x3, 0x48, @string={0x48, 0x3, "e5c4cfb5c1f7098faa15bafcfb2e2334af89b313c970138a775aa71bddb520bfadc273eaaf13b692a6e432a7263fbdcd593fbdaef92b92dc8774c1ea5aeda11b25a48ae0bd85"}}, &(0x7f0000000180)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x9, "48e2f938"}, @local=@item_4={0x3, 0x2, 0x0, "6d5ff783"}, @main=@item_4={0x3, 0x0, 0x6, "c76f0c10"}, @global=@item_4={0x3, 0x1, 0x6, "833b24c1"}, @main=@item_4={0x3, 0x0, 0xc, "4ba67dd2"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "471d6788"}, @global=@item_012={0x0, 0x1, 0x1}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x6, 0x1, {0x22, 0xd44}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x15, 0x14, "fe4129cfb65ed1c789d992d767a799cb45f54e8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x1, 0x90, "db5d5650b1e3a19452c7160749db2624384d8c335efe2673d9868eb873efb2c353b59c340a974eb3f5ed32d253e4dc1588ca3e90c0ff316581ef5c888962cf03cf3d6a650cdf9a99b642ff3bdd9363a45107b37a4d5d564efbf2536b690e5c9d0bd4d6124a71e0e18144005e02081ff6a6e36e73957763aac4be034479ade4a78692a0a1c4b40de04c2940429b3dc3b0"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x2}}) syz_usb_connect(0x0, 0x13c, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100003ff984202104c90453230102030909022a01020000000009040000030202"], 0x0) (async) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000a97000205d0500905ff1010203010902120001000000000904"], 0x0) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, &(0x7f0000000540)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000500)={0x2c, 0x0, &(0x7f0000000300)={0x0, 0xa, 0x1, 0xff}, 0x0, 0x0, 0x0}) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io$hid(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, 0x0, &(0x7f0000000080)={0x84, &(0x7f0000000300)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, &(0x7f0000000000)={0x40, 0x23, 0xa9, {0xa9, 0x46709bd412643e85, "9016ebfab65e6a145f11b578dc0e561806c86ad52d47c7ece0d7e9286901c10a50d1273cb0b0d319a0a162ba1ed01691486d6efbf9ea99266f6d0e93ea0d3dab8312352057dd540461d6fa93b5b084688b7efe9c74cbe8f104b20a6d8cec710141d8da484de2a03b0da13e951d13850593b19db733f1a63d425f7d4d2ceb19b8782ecee74bc14eb76d28b533fae13a77d198192415c015b90700c2e6c53541ddd1ba92b236499b"}}, &(0x7f0000000100)={0x0, 0x3, 0x48, @string={0x48, 0x3, "e5c4cfb5c1f7098faa15bafcfb2e2334af89b313c970138a775aa71bddb520bfadc273eaaf13b692a6e432a7263fbdcd593fbdaef92b92dc8774c1ea5aeda11b25a48ae0bd85"}}, &(0x7f0000000180)={0x0, 0x22, 0x21, {[@main=@item_4={0x3, 0x0, 0x9, "48e2f938"}, @local=@item_4={0x3, 0x2, 0x0, "6d5ff783"}, @main=@item_4={0x3, 0x0, 0x6, "c76f0c10"}, @global=@item_4={0x3, 0x1, 0x6, "833b24c1"}, @main=@item_4={0x3, 0x0, 0xc, "4ba67dd2"}, @main=@item_012={0x0, 0x0, 0x9}, @main=@item_4={0x3, 0x0, 0x9, "471d6788"}, @global=@item_012={0x0, 0x1, 0x1}, @global=@item_012={0x0, 0x1, 0xb}]}}, &(0x7f00000001c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x80, 0x6, 0x1, {0x22, 0xd44}}}}, &(0x7f0000000400)={0x2c, &(0x7f0000000240)={0x0, 0x15, 0x14, "fe4129cfb65ed1c789d992d767a799cb45f54e8f"}, &(0x7f0000000280)={0x0, 0xa, 0x1, 0x20}, &(0x7f00000002c0)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000300)={0x20, 0x1, 0x90, "db5d5650b1e3a19452c7160749db2624384d8c335efe2673d9868eb873efb2c353b59c340a974eb3f5ed32d253e4dc1588ca3e90c0ff316581ef5c888962cf03cf3d6a650cdf9a99b642ff3bdd9363a45107b37a4d5d564efbf2536b690e5c9d0bd4d6124a71e0e18144005e02081ff6a6e36e73957763aac4be034479ade4a78692a0a1c4b40de04c2940429b3dc3b0"}, &(0x7f00000003c0)={0x20, 0x3, 0x1, 0x2}}) (async) 02:10:48 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:48 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x19}, 0x1c) 02:10:48 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x24}, 0x1c) 02:10:48 executing program 5: bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:48 executing program 0: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:48 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:48 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:10:51 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1c}, 0x1c) 02:10:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:10:51 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x26}, 0x1c) 02:10:51 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:51 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1a}, 0x1c) 02:10:51 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_create(0x7, &(0x7f0000000280)={0x0, 0x29, 0x2, @thr={&(0x7f00000001c0)="86694933c1cfae7d", &(0x7f0000000540)="10bb277e00b37b14c01cd610328c4fcc83733d5f15c756f4f7ed6bea943c75f44220e2ef910ef61ad92e0ae49094d3f93b1469dcce3fd51dc4a015132bab01654c2ce4c6a6c71a8e0b9ea171de907a58294560cc61095a1e6f8d065409eee2922808c5745b2e72f41c39f9de1940552a22a36a90f8fcb258c33accad6660a13a309d643f386745f3fa12a0f8c1f5a1ae77901889456b28f2a4d0db9313bacd90caad3ff7afaf7d5d431b1eb1b34b75f9b8725707d005357e206a95950d71728d80799ec2c124935425251daf6d16fa0c54c9da2eb8df5f910d4c9efb226bd577c5"}}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}, {r2, r3+10000000}}, &(0x7f0000000640)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x34, 0x0, @thr={&(0x7f0000000340)="9a928192987591aa17acea1912f1ed5f06c9651c9fcc4ed9bae46f6187ce436f4b38bde5cf6b3b55eb", &(0x7f0000000680)="5194fae33863903c828ff45b050d9a480116c60895716716f05b009a9fb8afa1075b679f16ffbd715286692d71e6aa47d06a540700000000000000b99cc3fc542420851f1902371f6aec813dac42fb4333afbbf5813fcf4cf6fc3cd5e50419f5ffdd77dd65e2240144fb000027a01bd874f36f21127cefd5d54f9d03"}}, &(0x7f00000002c0)=0x0) timer_settime(r4, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, 0x0) ptrace(0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x6, 0x9) sendto$inet(r5, &(0x7f00000004c0)="ad360629c8a0ac37883f37340844321a0b31689d09719975f8427794b08070e9abe8bd51ac29b58ada5bc15dea324a9e4b05770276edd46ade39287592c8102dec5b6e457e40cf37d1d716b03fc4e2063774d7347132d65b872920229170625739022345bbcd83e04780584f3f0e0dcff1d0f124", 0x74, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 02:10:51 executing program 0: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:10:51 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 1) 02:10:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:52 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_create(0x7, &(0x7f0000000280)={0x0, 0x29, 0x2, @thr={&(0x7f00000001c0)="86694933c1cfae7d", &(0x7f0000000540)="10bb277e00b37b14c01cd610328c4fcc83733d5f15c756f4f7ed6bea943c75f44220e2ef910ef61ad92e0ae49094d3f93b1469dcce3fd51dc4a015132bab01654c2ce4c6a6c71a8e0b9ea171de907a58294560cc61095a1e6f8d065409eee2922808c5745b2e72f41c39f9de1940552a22a36a90f8fcb258c33accad6660a13a309d643f386745f3fa12a0f8c1f5a1ae77901889456b28f2a4d0db9313bacd90caad3ff7afaf7d5d431b1eb1b34b75f9b8725707d005357e206a95950d71728d80799ec2c124935425251daf6d16fa0c54c9da2eb8df5f910d4c9efb226bd577c5"}}, &(0x7f0000000300)=0x0) (async) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}, {r2, r3+10000000}}, &(0x7f0000000640)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async, rerun: 64) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x34, 0x0, @thr={&(0x7f0000000340)="9a928192987591aa17acea1912f1ed5f06c9651c9fcc4ed9bae46f6187ce436f4b38bde5cf6b3b55eb", &(0x7f0000000680)="5194fae33863903c828ff45b050d9a480116c60895716716f05b009a9fb8afa1075b679f16ffbd715286692d71e6aa47d06a540700000000000000b99cc3fc542420851f1902371f6aec813dac42fb4333afbbf5813fcf4cf6fc3cd5e50419f5ffdd77dd65e2240144fb000027a01bd874f36f21127cefd5d54f9d03"}}, &(0x7f00000002c0)=0x0) timer_settime(r4, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, 0x0) (async, rerun: 32) ptrace(0xffffffffffffffff, 0x0) (async, rerun: 32) r5 = socket$inet(0x2, 0x6, 0x9) sendto$inet(r5, &(0x7f00000004c0)="ad360629c8a0ac37883f37340844321a0b31689d09719975f8427794b08070e9abe8bd51ac29b58ada5bc15dea324a9e4b05770276edd46ade39287592c8102dec5b6e457e40cf37d1d716b03fc4e2063774d7347132d65b872920229170625739022345bbcd83e04780584f3f0e0dcff1d0f124", 0x74, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async, rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (rerun: 32) 02:10:52 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:52 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x28}, 0x1c) 02:10:52 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1b}, 0x1c) [ 528.408181][T11547] FAULT_INJECTION: forcing a failure. [ 528.408181][T11547] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.408214][T11547] CPU: 1 PID: 11547 Comm: syz-executor.2 Not tainted 5.18.0-syzkaller-11972-gd1dc87763f40 #0 [ 528.408242][T11547] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 528.408256][T11547] Call Trace: [ 528.408262][T11547] [ 528.408270][T11547] dump_stack_lvl+0xcd/0x134 [ 528.408304][T11547] should_fail.cold+0x5/0xa [ 528.408340][T11547] _copy_to_user+0x2a/0x140 [ 528.408380][T11547] simple_read_from_buffer+0xcc/0x160 [ 528.408508][T11547] proc_fail_nth_read+0x187/0x220 [ 528.408576][T11547] ? proc_exe_link+0x1d0/0x1d0 02:10:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 528.408607][T11547] ? security_file_permission+0xab/0xd0 [ 528.408707][T11547] ? proc_exe_link+0x1d0/0x1d0 [ 528.408738][T11547] vfs_read+0x1ef/0x5d0 [ 528.408809][T11547] ksys_read+0x127/0x250 [ 528.408838][T11547] ? vfs_write+0xac0/0xac0 [ 528.408867][T11547] ? syscall_enter_from_user_mode+0x21/0x70 [ 528.408902][T11547] ? syscall_enter_from_user_mode+0x21/0x70 [ 528.408942][T11547] do_syscall_64+0x35/0xb0 [ 528.408969][T11547] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 528.408995][T11547] RIP: 0033:0x7f880183bcbc [ 528.409015][T11547] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 02:10:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 528.409039][T11547] RSP: 002b:00007f88007fe160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 528.409065][T11547] RAX: ffffffffffffffda RBX: 00007f880199bf60 RCX: 00007f880183bcbc [ 528.409083][T11547] RDX: 000000000000000f RSI: 00007f88007fe1e0 RDI: 0000000000000006 [ 528.409099][T11547] RBP: 00007f88007fe1d0 R08: 0000000000000000 R09: 0000000000000000 [ 528.409115][T11547] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 528.409129][T11547] R13: 00007f8801ecfb1f R14: 00007f88007fe300 R15: 0000000000022000 [ 528.409165][T11547] 02:10:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x2, 0x0) 02:10:52 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:52 executing program 4: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_create(0x7, &(0x7f0000000280)={0x0, 0x29, 0x2, @thr={&(0x7f00000001c0)="86694933c1cfae7d", &(0x7f0000000540)="10bb277e00b37b14c01cd610328c4fcc83733d5f15c756f4f7ed6bea943c75f44220e2ef910ef61ad92e0ae49094d3f93b1469dcce3fd51dc4a015132bab01654c2ce4c6a6c71a8e0b9ea171de907a58294560cc61095a1e6f8d065409eee2922808c5745b2e72f41c39f9de1940552a22a36a90f8fcb258c33accad6660a13a309d643f386745f3fa12a0f8c1f5a1ae77901889456b28f2a4d0db9313bacd90caad3ff7afaf7d5d431b1eb1b34b75f9b8725707d005357e206a95950d71728d80799ec2c124935425251daf6d16fa0c54c9da2eb8df5f910d4c9efb226bd577c5"}}, &(0x7f0000000300)=0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}, {r2, r3+10000000}}, &(0x7f0000000640)) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000240)={0x0, 0x34, 0x0, @thr={&(0x7f0000000340)="9a928192987591aa17acea1912f1ed5f06c9651c9fcc4ed9bae46f6187ce436f4b38bde5cf6b3b55eb", &(0x7f0000000680)="5194fae33863903c828ff45b050d9a480116c60895716716f05b009a9fb8afa1075b679f16ffbd715286692d71e6aa47d06a540700000000000000b99cc3fc542420851f1902371f6aec813dac42fb4333afbbf5813fcf4cf6fc3cd5e50419f5ffdd77dd65e2240144fb000027a01bd874f36f21127cefd5d54f9d03"}}, &(0x7f00000002c0)=0x0) timer_settime(r4, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, 0x0) ptrace(0xffffffffffffffff, 0x0) r5 = socket$inet(0x2, 0x6, 0x9) sendto$inet(r5, &(0x7f00000004c0)="ad360629c8a0ac37883f37340844321a0b31689d09719975f8427794b08070e9abe8bd51ac29b58ada5bc15dea324a9e4b05770276edd46ade39287592c8102dec5b6e457e40cf37d1d716b03fc4e2063774d7347132d65b872920229170625739022345bbcd83e04780584f3f0e0dcff1d0f124", 0x74, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) (async) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) (async) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)) (async) timer_create(0x7, &(0x7f0000000280)={0x0, 0x29, 0x2, @thr={&(0x7f00000001c0)="86694933c1cfae7d", &(0x7f0000000540)="10bb277e00b37b14c01cd610328c4fcc83733d5f15c756f4f7ed6bea943c75f44220e2ef910ef61ad92e0ae49094d3f93b1469dcce3fd51dc4a015132bab01654c2ce4c6a6c71a8e0b9ea171de907a58294560cc61095a1e6f8d065409eee2922808c5745b2e72f41c39f9de1940552a22a36a90f8fcb258c33accad6660a13a309d643f386745f3fa12a0f8c1f5a1ae77901889456b28f2a4d0db9313bacd90caad3ff7afaf7d5d431b1eb1b34b75f9b8725707d005357e206a95950d71728d80799ec2c124935425251daf6d16fa0c54c9da2eb8df5f910d4c9efb226bd577c5"}}, &(0x7f0000000300)) (async) clock_gettime(0x0, &(0x7f0000000380)) (async) timer_settime(r1, 0x1, &(0x7f0000000400)={{0x0, 0x3938700}, {r2, r3+10000000}}, &(0x7f0000000640)) (async) timer_settime(r0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) futex(&(0x7f0000000040)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) (async) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) (async) timer_create(0x0, &(0x7f0000000240)={0x0, 0x34, 0x0, @thr={&(0x7f0000000340)="9a928192987591aa17acea1912f1ed5f06c9651c9fcc4ed9bae46f6187ce436f4b38bde5cf6b3b55eb", &(0x7f0000000680)="5194fae33863903c828ff45b050d9a480116c60895716716f05b009a9fb8afa1075b679f16ffbd715286692d71e6aa47d06a540700000000000000b99cc3fc542420851f1902371f6aec813dac42fb4333afbbf5813fcf4cf6fc3cd5e50419f5ffdd77dd65e2240144fb000027a01bd874f36f21127cefd5d54f9d03"}}, &(0x7f00000002c0)) (async) timer_settime(r4, 0x0, &(0x7f00000003c0)={{0x77359400}, {0x77359400}}, 0x0) (async) ptrace(0xffffffffffffffff, 0x0) (async) socket$inet(0x2, 0x6, 0x9) (async) sendto$inet(r5, &(0x7f00000004c0)="ad360629c8a0ac37883f37340844321a0b31689d09719975f8427794b08070e9abe8bd51ac29b58ada5bc15dea324a9e4b05770276edd46ade39287592c8102dec5b6e457e40cf37d1d716b03fc4e2063774d7347132d65b872920229170625739022345bbcd83e04780584f3f0e0dcff1d0f124", 0x74, 0x0, &(0x7f0000000140)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10) (async) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) 02:10:53 executing program 5: socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:53 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x29}, 0x1c) 02:10:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x10, 0x0) 02:10:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1c}, 0x1c) 02:10:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, 0x0, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x1e}, 0x1c) 02:10:53 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x22}, 0x1c) 02:10:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x541b, 0x0) 02:10:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5421, 0x0) 02:10:53 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:54 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:54 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0), &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:54 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2a}, 0x1c) 02:10:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5450, 0x0) 02:10:54 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x24}, 0x1c) 02:10:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5451, 0x0) 02:10:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) 02:10:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) [ 530.784704][T11709] usb usb9: usbfs: process 11709 (syz-executor.4) did not claim interface 0 before use 02:10:54 executing program 4: r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0x77, 0x1) ioctl$USBDEVFS_SUBMITURB(r0, 0x8038550a, &(0x7f00000001c0)=@urb_type_interrupt={0x1, {0x1, 0x1}, 0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) (async) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) dup2(r1, r0) 02:10:54 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) [ 530.836785][T11713] usb usb9: usbfs: process 11713 (syz-executor.4) did not claim interface 0 before use 02:10:54 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x6, 0x0, 0x7, 0x0, 0x7]}, &(0x7f00000000c0)=0x78) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340), 0xffffffc1}, 0x0) getpid() accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x22c0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002b80)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6d) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) [ 530.901783][T11721] usb usb9: usbfs: process 11721 (syz-executor.4) did not claim interface 0 before use 02:10:55 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5452, 0x0) 02:10:55 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2b}, 0x1c) 02:10:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:55 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x26}, 0x1c) 02:10:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5460, 0x0) 02:10:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x6, 0x0, 0x7, 0x0, 0x7]}, &(0x7f00000000c0)=0x78) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0) (async, rerun: 32) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340), 0xffffffc1}, 0x0) getpid() accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_setup(0x22c0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002b80)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6d) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 02:10:55 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:55 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x6, 0x0, 0x7, 0x0, 0x7]}, &(0x7f00000000c0)=0x78) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340), 0xffffffc1}, 0x0) getpid() accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x22c0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002b80)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6d) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) dup2(0xffffffffffffffff, 0xffffffffffffffff) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) (async) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x6, 0x0, 0x7, 0x0, 0x7]}, &(0x7f00000000c0)=0x78) (async) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340), 0xffffffc1}, 0x0) (async) getpid() (async) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_setup(0x22c0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)) (async) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002b80)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6d) (async) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) (async) 02:10:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x8933, 0x0) 02:10:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:56 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x28}, 0x1c) 02:10:56 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2c}, 0x1c) 02:10:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:10:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xaece, 0x0) 02:10:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:56 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f0000000180)={'broute\x00', 0x0, 0x0, 0x0, [0x5, 0x6, 0x0, 0x7, 0x0, 0x7]}, &(0x7f00000000c0)=0x78) process_vm_readv(0x0, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000340), 0xffffffc1}, 0x0) getpid() accept$alg(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_setup(0x22c0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x3d8}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000100), &(0x7f0000000200)=0x0) syz_io_uring_submit(0x0, r3, &(0x7f0000000000)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000002b80)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, 0x6d) migrate_pages(0x0, 0x5, &(0x7f0000000000)=0x9, &(0x7f0000000040)=0x272) 02:10:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x400448c9, 0x0) 02:10:56 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280), 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x29}, 0x1c) 02:10:57 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2e}, 0x1c) 02:10:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x400448dd, 0x0) 02:10:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x400454ca, 0x0) 02:10:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:57 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x40049409, 0x0) 02:10:57 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280), 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2a}, 0x1c) 02:10:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x30}, 0x1c) 02:10:58 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2c}, 0x1c) 02:10:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x0, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4004ae8b, 0x0) 02:10:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4004ae99, 0x0) 02:10:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:58 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280), 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x40086602, 0x0) 02:10:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2b}, 0x1c) 02:10:58 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x31}, 0x1c) 02:10:58 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, 0x0, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xaece, 0x0) 02:10:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x40186366, 0x0) 02:10:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x40086602, 0x0) 02:10:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x401c5820, 0x0) 02:10:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x40186366, 0x0) 02:10:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2c}, 0x1c) 02:10:59 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x32}, 0x1c) 02:10:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:10:59 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140), 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:10:59 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4020940d, 0x0) 02:10:59 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, 0x0, 0x0) 02:11:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, 0x0, 0x0) 02:11:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, 0x0, 0x0) 02:11:00 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:11:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:00 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x6}, 0x1c) 02:11:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5452, 0x0) 02:11:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2e}, 0x1c) 02:11:00 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x34}, 0x1c) 02:11:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4048ae9b, 0x0) 02:11:00 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:00 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x5452, 0x0) 02:11:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:01 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x2c}, 0x1c) 02:11:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4090ae82, 0x0) 02:11:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4138ae84, 0x0) 02:11:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x30}, 0x1c) 02:11:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:01 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x35}, 0x1c) 02:11:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x41a0ae8d, 0x0) 02:11:01 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:01 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) 02:11:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x8004ae98, 0x0) 02:11:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) 02:11:02 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev}, 0x1c) 02:11:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x31}, 0x1c) 02:11:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, 0x0, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x4048ae9b, 0x0) 02:11:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x80086301, 0x0) 02:11:02 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x36}, 0x1c) 02:11:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x80086601, 0x0) 02:11:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x80086301, 0x0) 02:11:02 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, 0x0, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:02 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(0x0, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x801c581f, 0x0) 02:11:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x32}, 0x1c) 02:11:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x80086601, 0x0) 02:11:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (fail_nth: 1) 02:11:03 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x37}, 0x1c) 02:11:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (fail_nth: 2) 02:11:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x8090ae81, 0x0) 02:11:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 539.493492][T12294] FAULT_INJECTION: forcing a failure. [ 539.493492][T12294] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.493528][T12294] CPU: 0 PID: 12294 Comm: syz-executor.5 Not tainted 5.18.0-syzkaller-11972-gd1dc87763f40 #0 [ 539.493557][T12294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 539.493573][T12294] Call Trace: [ 539.493580][T12294] [ 539.493588][T12294] dump_stack_lvl+0xcd/0x134 [ 539.493620][T12294] should_fail.cold+0x5/0xa [ 539.493655][T12294] _copy_from_user+0x2a/0x170 [ 539.493686][T12294] move_addr_to_kernel.part.0+0x31/0x110 [ 539.493727][T12294] __sys_connect+0xda/0x190 [ 539.493752][T12294] ? __sys_connect_file+0x190/0x190 [ 539.493783][T12294] ? lock_downgrade+0x6e0/0x6e0 [ 539.493832][T12294] ? syscall_enter_from_user_mode+0x21/0x70 [ 539.493875][T12294] __x64_sys_connect+0x6f/0xb0 [ 539.493898][T12294] ? syscall_enter_from_user_mode+0x21/0x70 [ 539.493933][T12294] do_syscall_64+0x35/0xb0 02:11:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (fail_nth: 3) [ 539.493963][T12294] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 539.493993][T12294] RIP: 0033:0x7f5a62089109 [ 539.494015][T12294] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 539.494045][T12294] RSP: 002b:00007f5a63215168 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 539.494072][T12294] RAX: ffffffffffffffda RBX: 00007f5a6219bf60 RCX: 00007f5a62089109 02:11:03 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 539.494092][T12294] RDX: 000000000000001c RSI: 0000000020000040 RDI: 0000000000000004 [ 539.494111][T12294] RBP: 00007f5a632151d0 R08: 0000000000000000 R09: 0000000000000000 [ 539.494128][T12294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.494144][T12294] R13: 00007f5a626cfb1f R14: 00007f5a63215300 R15: 0000000000022000 [ 539.494183][T12294] 02:11:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (fail_nth: 4) 02:11:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (fail_nth: 5) 02:11:03 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) (fail_nth: 6) 02:11:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x34}, 0x1c) 02:11:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x8138ae83, 0x0) 02:11:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:04 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x38}, 0x1c) 02:11:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x8090ae81, 0x0) 02:11:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x81a0ae8c, 0x0) 02:11:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0x801c581f, 0x0) 02:11:04 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:04 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc0045878, 0x0) 02:11:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:05 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x35}, 0x1c) 02:11:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc0045878, 0x0) 02:11:05 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x39}, 0x1c) 02:11:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:05 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 02:11:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc0189436, 0x0) 02:11:05 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0x2, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:05 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) syz_clone3(&(0x7f0000000240)={0x44000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f00000006c0), &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/6, 0x6, &(0x7f0000000140)=""/162, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0xfffffffffffffdcf) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000002c0)={0x0, 0x8, 0x7ff, 0x1}) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRES32=r2], 0x67f) io_uring_setup(0x2656, &(0x7f000000a480)={0x0, 0x1e930, 0x12, 0x3, 0xe3, 0x0, r2}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) io_uring_setup(0x2654, &(0x7f000000a480)={0x0, 0x0, 0x2, 0x0, 0xe6}) 02:11:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0x3, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:05 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0x6, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x36}, 0x1c) 02:11:06 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) (async) syz_clone3(&(0x7f0000000240)={0x44000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f00000006c0), &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/6, 0x6, &(0x7f0000000140)=""/162, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0xfffffffffffffdcf) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000002c0)={0x0, 0x8, 0x7ff, 0x1}) (async) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) (async) r3 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRES32=r2], 0x67f) (async, rerun: 64) io_uring_setup(0x2656, &(0x7f000000a480)={0x0, 0x1e930, 0x12, 0x3, 0xe3, 0x0, r2}) (rerun: 64) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) (async) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) (async, rerun: 64) io_uring_setup(0x2654, &(0x7f000000a480)={0x0, 0x0, 0x2, 0x0, 0xe6}) (rerun: 64) 02:11:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc018ae85, 0x0) 02:11:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0x7, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:06 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3c}, 0x1c) 02:11:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0x10, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0x12, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0x14, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:06 executing program 4: r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) (async) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, 0x1) syz_clone3(&(0x7f0000000240)={0x44000000, &(0x7f0000000040)=0xffffffffffffffff, &(0x7f00000006c0), &(0x7f00000000c0), {0x1a}, &(0x7f0000000100)=""/6, 0x6, &(0x7f0000000140)=""/162, &(0x7f0000000200)=[0xffffffffffffffff], 0x1}, 0xfffffffffffffdcf) ioctl$BTRFS_IOC_SCRUB(r1, 0xc400941b, &(0x7f00000002c0)={0x0, 0x8, 0x7ff, 0x1}) (async) r2 = syz_io_uring_setup(0x2de7, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000000100), 0x0) io_uring_enter(r2, 0x22ff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) write$binfmt_elf64(r2, &(0x7f0000000080)=ANY=[@ANYRESHEX=r3, @ANYRESDEC=r2, @ANYRES32=r2], 0x67f) (async) io_uring_setup(0x2656, &(0x7f000000a480)={0x0, 0x1e930, 0x12, 0x3, 0xe3, 0x0, r2}) (async) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, 0x0) io_uring_setup(0x2654, &(0x7f000000a480)={0x0, 0x0, 0x2, 0x0, 0xe6}) 02:11:06 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0x25, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:06 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x37}, 0x1c) 02:11:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c) 02:11:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xc020660b, 0x0) 02:11:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3d}, 0x1c) 02:11:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x2) 02:11:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9dcb7a3499b0c9b3e88d7bbe16002100", @ANYRES16=0x0, @ANYBLOB="0000000000100000000000180000000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) 02:11:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9dcb7a3499b0c9b3e88d7bbe16002100", @ANYRES16=0x0, @ANYBLOB="0000000000100000000000180000000000"], 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9dcb7a3499b0c9b3e88d7bbe16002100", @ANYRES16=0x0, @ANYBLOB="0000000000100000000000180000000000"], 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) (async) [ 543.451500][T12561] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 02:11:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:07 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9dcb7a3499b0c9b3e88d7bbe16002100", @ANYRES16=0x0, @ANYBLOB="0000000000100000000000180000000000"], 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r4}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x44}}, 0x0) [ 543.542860][T12567] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 543.635480][T12578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 02:11:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x38}, 0x1c) 02:11:07 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/238, 0xee}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/4, 0x4}, {&(0x7f00000014c0)=""/229, 0xe5}], 0x8, 0x3, 0x2) preadv(r0, &(0x7f00000043c0)=[{&(0x7f0000000140)=""/21, 0x15}, {0x0, 0x3}], 0x2, 0x0, 0x0) 02:11:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x3) 02:11:07 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, 0x0, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:07 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x2, 0x0, @dev, 0x6}, 0x1c) 02:11:07 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3e}, 0x1c) 02:11:08 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/238, 0xee}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/4, 0x4}, {&(0x7f00000014c0)=""/229, 0xe5}], 0x8, 0x3, 0x2) preadv(r0, &(0x7f00000043c0)=[{&(0x7f0000000140)=""/21, 0x15}, {0x0, 0x3}], 0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/238, 0xee}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/4, 0x4}, {&(0x7f00000014c0)=""/229, 0xe5}], 0x8, 0x3, 0x2) (async) preadv(r0, &(0x7f00000043c0)=[{&(0x7f0000000140)=""/21, 0x15}, {0x0, 0x3}], 0x2, 0x0, 0x0) (async) 02:11:08 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/238, 0xee}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/4, 0x4}, {&(0x7f00000014c0)=""/229, 0xe5}], 0x8, 0x3, 0x2) preadv(r0, &(0x7f00000043c0)=[{&(0x7f0000000140)=""/21, 0x15}, {0x0, 0x3}], 0x2, 0x0, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000000)=""/232, 0xe8}, {&(0x7f0000000180)}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/238, 0xee}, {&(0x7f0000001380)=""/198, 0xc6}, {&(0x7f0000001480)=""/4, 0x4}, {&(0x7f00000014c0)=""/229, 0xe5}], 0x8, 0x3, 0x2) (async) preadv(r0, &(0x7f00000043c0)=[{&(0x7f0000000140)=""/21, 0x15}, {0x0, 0x3}], 0x2, 0x0, 0x0) (async) 02:11:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', 0xb002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0xa002a0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85375b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c110d13e42fd630177c93502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed94600f95b3a11954ed1c8a8676468cf2405e48723d4b1ff50886753415ec5a7b771200902b44c29d5aa8712f826e16937ee765e26d60a7fea67664d263618d58626789b19d11b055dbd368e74153f619ef67c2437a826eeaa191eeff17d7ede095038edeb2ffc46416ae73c27348d47d934c3a15afc2df7acd4721141688e6d708285f0da952e67c09d5ab4cfb6e7a15b6d57e17bf2cdd28d5b46640072428f4038ed796f"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="040e00000047ba5f36c8ae84541d4a000000"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000440)='./file0\x00', 0x8, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0xcc, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0xc001) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) [ 544.295869][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.296184][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:11:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x4) [ 544.305557][T12616] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.322530][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.324974][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.325111][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.364872][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.374139][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.374313][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:11:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', 0xb002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0xa002a0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="040e00000047ba5f36c8ae84541d4a000000"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000440)='./file0\x00', 0x8, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0xcc, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0xc001) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', 0xb002}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0xa002a0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="040e00000047ba5f36c8ae84541d4a000000"], 0x34}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) (async) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) (async) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000440)='./file0\x00', 0x8, 0x1) (async) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0xcc, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0xc001) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) (async) [ 544.473978][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.476482][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.476617][T12616] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.610055][T12624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.613665][T12624] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 544.641003][T12624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.648639][T12624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.649904][T12624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.703662][T12632] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.706234][T12632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.706364][T12632] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 544.773335][T12624] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.775876][T12624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 544.776005][T12624] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:11:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x39}, 0x1c) 02:11:08 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x5) 02:11:08 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', 0xb002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0xa002a0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="040e00000047ba5f36c8ae84541d4a000000"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) (async) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000440)='./file0\x00', 0x8, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) (async) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0xcc, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0xc001) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 02:11:08 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3, 0x0, @dev, 0x6}, 0x1c) 02:11:08 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x41}, 0x1c) [ 544.969515][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 544.993430][T12650] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:11:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 544.999153][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 545.000509][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.000590][T12650] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 545.096618][T12661] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 02:11:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 545.112240][T12661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.113739][T12661] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x6) 02:11:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x7) 02:11:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3c}, 0x1c) 02:11:09 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4, 0x0, @dev, 0x6}, 0x1c) 02:11:09 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x43}, 0x1c) 02:11:09 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000280)={'erspan0\x00', 0xb002}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x28, 0x10, 0xc362e63b3f31ba5f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0xa002a0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85375b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c110d13e42fd630177c93502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed94600f95b3a11954ed1c8a8676468cf2405e48723d4b1ff50886753415ec5a7b771200902b44c29d5aa8712f826e16937ee765e26d60a7fea67664d263618d58626789b19d11b055dbd368e74153f619ef67c2437a826eeaa191eeff17d7ede095038edeb2ffc46416ae73c27348d47d934c3a15afc2df7acd4721141688e6d708285f0da952e67c09d5ab4cfb6e7a15b6d57e17bf2cdd28d5b46640072428f4038ed796f"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="340000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r2, @ANYBLOB="040e00000047ba5f36c8ae84541d4a000000"], 0x34}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x18) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000100), 0x4) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000200), &(0x7f0000000440)='./file0\x00', 0x8, 0x1) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8, 0x1, r4}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x100a, &(0x7f0000001400)=""/4106, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x2c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x4}, @IFLA_GROUP={0x8}]}, 0x2c}}, 0x0) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000600)={0xcc, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [{{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x86}}}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40}, 0xc001) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) 02:11:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xe) [ 545.898627][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 545.922063][T12721] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. 02:11:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 545.986604][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 545.989113][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 545.989249][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.053298][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 546.061791][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.061917][T12721] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 546.142686][T12729] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 546.158292][T12729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 546.158573][T12729] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 02:11:10 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x43, 0xed, 0xc8, 0x40, 0x45e, 0x2bf, 0x3a7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x63, 0x0, 0x0, 0xe2, 0x6e, 0xb6}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xf3, 0xf0, 0x8d}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0xc4, {0xc4, 0x24, "b9a2669d5156871013f6dfec13cfb7d9e80a5b77ff82a8cc2b711ca13ed8ff8ab5b6f493e788acfdf2142147bd162f4ee0db1c44ea24f9bb8053be7ebb5952bfb133336afd74a5ea5c31656958a2585e8942bbddbac662312ac4eb44b705f720b2b890b82753ee93b63f8a737fafe61b5a28c69ade0427d4e15cea35287defd568ef3228cd70872d2fc06ef763bac361b6b121f7a6e4941458d52718c7dbe48a741fcda80e04ca5074acf00b56b4141f1ad7931cf1863b711b016b5c8682802bcbcb"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000000140)={0x0, 0xf, 0xca, {0x5, 0xf, 0xca, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x200, 0xff0f, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x0, 0xf00, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x54, 0x1f, 0x7, 0x4, 0x40}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x40, 0x2, 0xfff, 0x3f}, @ptm_cap={0x3}, @generic={0x94, 0x10, 0xb, "0d0999c2d944b6d9cd19fdb08b72652de9613de5d572e4ace4cd38b46df6d368620c065fd13b560a2944b0d5eff897065938552c01a8ee944b262b7149b3432ab5f70fe69e5d56b51e5b8973429d866c9d6c45af1146f341af9a83fb8b401c7b6c410eacf277acb30c34d38662e33fb6b940e00d73c1480f0d59be854bb2f83adf5d71ffe7f5f718de2969c8eabe5593f2"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x3, 0x8, "26c0e2fc", "10c9dd8b"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4e, 0x18, 0x9, 0x0, 0x80, 0x401, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x11, 0x66, "0111987fcc4cab6d791f67d7b2c875e24881ab9287d443c864c79da2e0aa9b38da0cfb484b7151794e7c2a78d7a552fd698198458210e24aeabb3c898bfc1ae4def4256d8270d7c10615f6ca9c45b3437e50f083caf7d75ee7c36b2f41b848398da353a0a793"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x120}}, &(0x7f0000000480)={0x40, 0x7, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000500)={0x40, 0xb, 0x2, "0155"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "99c9"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000740)={0x40, 0x21, 0x1}}) 02:11:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x27) 02:11:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xc) 02:11:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3d}, 0x1c) 02:11:10 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5, 0x0, @dev, 0x6}, 0x1c) 02:11:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xd) 02:11:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x300) 02:11:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xf) 02:11:10 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x17) 02:11:10 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:13 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x43, 0xed, 0xc8, 0x40, 0x45e, 0x2bf, 0x3a7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x63, 0x0, 0x0, 0xe2, 0x6e, 0xb6}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xf3, 0xf0, 0x8d}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0xc4, {0xc4, 0x24, "b9a2669d5156871013f6dfec13cfb7d9e80a5b77ff82a8cc2b711ca13ed8ff8ab5b6f493e788acfdf2142147bd162f4ee0db1c44ea24f9bb8053be7ebb5952bfb133336afd74a5ea5c31656958a2585e8942bbddbac662312ac4eb44b705f720b2b890b82753ee93b63f8a737fafe61b5a28c69ade0427d4e15cea35287defd568ef3228cd70872d2fc06ef763bac361b6b121f7a6e4941458d52718c7dbe48a741fcda80e04ca5074acf00b56b4141f1ad7931cf1863b711b016b5c8682802bcbcb"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000000140)={0x0, 0xf, 0xca, {0x5, 0xf, 0xca, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x200, 0xff0f, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x0, 0xf00, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x54, 0x1f, 0x7, 0x4, 0x40}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x40, 0x2, 0xfff, 0x3f}, @ptm_cap={0x3}, @generic={0x94, 0x10, 0xb, "0d0999c2d944b6d9cd19fdb08b72652de9613de5d572e4ace4cd38b46df6d368620c065fd13b560a2944b0d5eff897065938552c01a8ee944b262b7149b3432ab5f70fe69e5d56b51e5b8973429d866c9d6c45af1146f341af9a83fb8b401c7b6c410eacf277acb30c34d38662e33fb6b940e00d73c1480f0d59be854bb2f83adf5d71ffe7f5f718de2969c8eabe5593f2"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x3, 0x8, "26c0e2fc", "10c9dd8b"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4e, 0x18, 0x9, 0x0, 0x80, 0x401, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x11, 0x66, "0111987fcc4cab6d791f67d7b2c875e24881ab9287d443c864c79da2e0aa9b38da0cfb484b7151794e7c2a78d7a552fd698198458210e24aeabb3c898bfc1ae4def4256d8270d7c10615f6ca9c45b3437e50f083caf7d75ee7c36b2f41b848398da353a0a793"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x120}}, &(0x7f0000000480)={0x40, 0x7, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000500)={0x40, 0xb, 0x2, "0155"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "99c9"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000740)={0x40, 0x21, 0x1}}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x43, 0xed, 0xc8, 0x40, 0x45e, 0x2bf, 0x3a7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x63, 0x0, 0x0, 0xe2, 0x6e, 0xb6}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xf3, 0xf0, 0x8d}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0xc4, {0xc4, 0x24, "b9a2669d5156871013f6dfec13cfb7d9e80a5b77ff82a8cc2b711ca13ed8ff8ab5b6f493e788acfdf2142147bd162f4ee0db1c44ea24f9bb8053be7ebb5952bfb133336afd74a5ea5c31656958a2585e8942bbddbac662312ac4eb44b705f720b2b890b82753ee93b63f8a737fafe61b5a28c69ade0427d4e15cea35287defd568ef3228cd70872d2fc06ef763bac361b6b121f7a6e4941458d52718c7dbe48a741fcda80e04ca5074acf00b56b4141f1ad7931cf1863b711b016b5c8682802bcbcb"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000000140)={0x0, 0xf, 0xca, {0x5, 0xf, 0xca, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x200, 0xff0f, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x0, 0xf00, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x54, 0x1f, 0x7, 0x4, 0x40}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x40, 0x2, 0xfff, 0x3f}, @ptm_cap={0x3}, @generic={0x94, 0x10, 0xb, "0d0999c2d944b6d9cd19fdb08b72652de9613de5d572e4ace4cd38b46df6d368620c065fd13b560a2944b0d5eff897065938552c01a8ee944b262b7149b3432ab5f70fe69e5d56b51e5b8973429d866c9d6c45af1146f341af9a83fb8b401c7b6c410eacf277acb30c34d38662e33fb6b940e00d73c1480f0d59be854bb2f83adf5d71ffe7f5f718de2969c8eabe5593f2"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x3, 0x8, "26c0e2fc", "10c9dd8b"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4e, 0x18, 0x9, 0x0, 0x80, 0x401, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x11, 0x66, "0111987fcc4cab6d791f67d7b2c875e24881ab9287d443c864c79da2e0aa9b38da0cfb484b7151794e7c2a78d7a552fd698198458210e24aeabb3c898bfc1ae4def4256d8270d7c10615f6ca9c45b3437e50f083caf7d75ee7c36b2f41b848398da353a0a793"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x120}}, &(0x7f0000000480)={0x40, 0x7, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000500)={0x40, 0xb, 0x2, "0155"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "99c9"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000740)={0x40, 0x21, 0x1}}) (async) 02:11:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1b) 02:11:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x500) 02:11:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:13 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x6, 0x0, @dev, 0x6}, 0x1c) 02:11:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x3e}, 0x1c) 02:11:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x2c0) 02:11:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x7ffffffff000) 02:11:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xa8aaaafffeaaaa0c) 02:11:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000170a020e00000000000000000c00000a080007400000000008000800075700000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4084) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="e36cc4acfe8994fef5818153fd3cc0ecdb74d2fea7048104531d85abfd02907ce616bbf946dabc31581fe9d364aba8e10ccbcd05839c554d3708f93067cfb5477c25076ea6e403e982e9791bd843de3ed872bda896a49b379f961aaec3160fa5b216c6d5ddf700027bf408fbdb4482d34a3f52c23f345cecc0d17a5cbab14ee436d7270ffe4ca1532eb7228d5d20774458edc6cb0332bc8e9b0a5f955175f63e1688b33ed7e443d6272fb37bd454b6aab003f4d2e3b91ff114ac54105b2499a2e1f9cee28ad2ba445668d1c42a3875ead520d2bbd34fcdb0b0e6afd7c4c1b28115a8", 0xe2}, {&(0x7f00000002c0)="99c2cc1ed9fc4a20ed3af5cb74fc8d6bd1e9734361ea1c05b0c89b0158b5c434a548063972eb455ec72be1167b095eb376b348e6b76a96ecc44e34567ffed851df618bc0984093f9e58d64da6314b50e86ecb0272fe2a3530218c58da47214cc4453c0158befb6f314aab80e165fbfe77c38894a937e954289ab38e3eee28b4258616da44a6e4dfe85db3b7f505832b9024a48e48bd7261e53184d8d7742bd507ca97f46009288f388bfe5c4cbea6aebca1c0aaa", 0xb4}, {&(0x7f0000000380)="7563b907b6c22d399f0af50e46fb306c8138e1fa90bf8da50372acc046c8555a0a6a1ef38b8e451bc499fa790ba2a7a2436f37e0353fe40e18f0ed362a802374825231d0a5dd1b40d007c7c39834b6f4b91d076548f9e5b909df91c7d21bf94b08f0d094ad9aed7067c098ee742aa18612c8b47d4d65144aefb23917310b131170c2f8e6a245759d921979", 0x8b}, {&(0x7f0000000440)}, {&(0x7f0000000480)="665c924a07cb721d8bab4ddad2934f005c7997cfade5345397a6e2f047fecb6bdd9fec2f6a75e7943956286103f0802123f68d25d2c25d497b7b2d0bcbe77cd2027686adb6ec8a8fc45cb48b29f56b508e01c2523b4a9e0d7533a268ce5f3bd1c6", 0x61}, {&(0x7f0000000500)="5b7cc65aa5cae1873f31fa57a8d03c0acc3a914eefb49ff3", 0x18}], 0x6, 0x100, 0x6) getpeername$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) 02:11:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000170a020e00000000000000000c00000a080007400000000008000800075700000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4084) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async, rerun: 64) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="e36cc4acfe8994fef5818153fd3cc0ecdb74d2fea7048104531d85abfd02907ce616bbf946dabc31581fe9d364aba8e10ccbcd05839c554d3708f93067cfb5477c25076ea6e403e982e9791bd843de3ed872bda896a49b379f961aaec3160fa5b216c6d5ddf700027bf408fbdb4482d34a3f52c23f345cecc0d17a5cbab14ee436d7270ffe4ca1532eb7228d5d20774458edc6cb0332bc8e9b0a5f955175f63e1688b33ed7e443d6272fb37bd454b6aab003f4d2e3b91ff114ac54105b2499a2e1f9cee28ad2ba445668d1c42a3875ead520d2bbd34fcdb0b0e6afd7c4c1b28115a8", 0xe2}, {&(0x7f00000002c0)="99c2cc1ed9fc4a20ed3af5cb74fc8d6bd1e9734361ea1c05b0c89b0158b5c434a548063972eb455ec72be1167b095eb376b348e6b76a96ecc44e34567ffed851df618bc0984093f9e58d64da6314b50e86ecb0272fe2a3530218c58da47214cc4453c0158befb6f314aab80e165fbfe77c38894a937e954289ab38e3eee28b4258616da44a6e4dfe85db3b7f505832b9024a48e48bd7261e53184d8d7742bd507ca97f46009288f388bfe5c4cbea6aebca1c0aaa", 0xb4}, {&(0x7f0000000380)="7563b907b6c22d399f0af50e46fb306c8138e1fa90bf8da50372acc046c8555a0a6a1ef38b8e451bc499fa790ba2a7a2436f37e0353fe40e18f0ed362a802374825231d0a5dd1b40d007c7c39834b6f4b91d076548f9e5b909df91c7d21bf94b08f0d094ad9aed7067c098ee742aa18612c8b47d4d65144aefb23917310b131170c2f8e6a245759d921979", 0x8b}, {&(0x7f0000000440)}, {&(0x7f0000000480)="665c924a07cb721d8bab4ddad2934f005c7997cfade5345397a6e2f047fecb6bdd9fec2f6a75e7943956286103f0802123f68d25d2c25d497b7b2d0bcbe77cd2027686adb6ec8a8fc45cb48b29f56b508e01c2523b4a9e0d7533a268ce5f3bd1c6", 0x61}, {&(0x7f0000000500)="5b7cc65aa5cae1873f31fa57a8d03c0acc3a914eefb49ff3", 0x18}], 0x6, 0x100, 0x6) (rerun: 64) getpeername$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) 02:11:13 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000170a020e00000000000000000c00000a080007400000000008000800075700000000"], 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4084) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) pwritev(r3, &(0x7f0000000540)=[{&(0x7f0000000180)="e36cc4acfe8994fef5818153fd3cc0ecdb74d2fea7048104531d85abfd02907ce616bbf946dabc31581fe9d364aba8e10ccbcd05839c554d3708f93067cfb5477c25076ea6e403e982e9791bd843de3ed872bda896a49b379f961aaec3160fa5b216c6d5ddf700027bf408fbdb4482d34a3f52c23f345cecc0d17a5cbab14ee436d7270ffe4ca1532eb7228d5d20774458edc6cb0332bc8e9b0a5f955175f63e1688b33ed7e443d6272fb37bd454b6aab003f4d2e3b91ff114ac54105b2499a2e1f9cee28ad2ba445668d1c42a3875ead520d2bbd34fcdb0b0e6afd7c4c1b28115a8", 0xe2}, {&(0x7f00000002c0)="99c2cc1ed9fc4a20ed3af5cb74fc8d6bd1e9734361ea1c05b0c89b0158b5c434a548063972eb455ec72be1167b095eb376b348e6b76a96ecc44e34567ffed851df618bc0984093f9e58d64da6314b50e86ecb0272fe2a3530218c58da47214cc4453c0158befb6f314aab80e165fbfe77c38894a937e954289ab38e3eee28b4258616da44a6e4dfe85db3b7f505832b9024a48e48bd7261e53184d8d7742bd507ca97f46009288f388bfe5c4cbea6aebca1c0aaa", 0xb4}, {&(0x7f0000000380)="7563b907b6c22d399f0af50e46fb306c8138e1fa90bf8da50372acc046c8555a0a6a1ef38b8e451bc499fa790ba2a7a2436f37e0353fe40e18f0ed362a802374825231d0a5dd1b40d007c7c39834b6f4b91d076548f9e5b909df91c7d21bf94b08f0d094ad9aed7067c098ee742aa18612c8b47d4d65144aefb23917310b131170c2f8e6a245759d921979", 0x8b}, {&(0x7f0000000440)}, {&(0x7f0000000480)="665c924a07cb721d8bab4ddad2934f005c7997cfade5345397a6e2f047fecb6bdd9fec2f6a75e7943956286103f0802123f68d25d2c25d497b7b2d0bcbe77cd2027686adb6ec8a8fc45cb48b29f56b508e01c2523b4a9e0d7533a268ce5f3bd1c6", 0x61}, {&(0x7f0000000500)="5b7cc65aa5cae1873f31fa57a8d03c0acc3a914eefb49ff3", 0x18}], 0x6, 0x100, 0x6) (async) getpeername$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000005c0)=0x14) 02:11:16 executing program 4: r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000540)={{0x12, 0x1, 0x0, 0x43, 0xed, 0xc8, 0x40, 0x45e, 0x2bf, 0x3a7f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x2, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x63, 0x0, 0x0, 0xe2, 0x6e, 0xb6}}, {{0x9, 0x4, 0x0, 0x0, 0x0, 0xf3, 0xf0, 0x8d}}]}}]}}, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000000)={0x0, 0x11, 0xc4, {0xc4, 0x24, "b9a2669d5156871013f6dfec13cfb7d9e80a5b77ff82a8cc2b711ca13ed8ff8ab5b6f493e788acfdf2142147bd162f4ee0db1c44ea24f9bb8053be7ebb5952bfb133336afd74a5ea5c31656958a2585e8942bbddbac662312ac4eb44b705f720b2b890b82753ee93b63f8a737fafe61b5a28c69ade0427d4e15cea35287defd568ef3228cd70872d2fc06ef763bac361b6b121f7a6e4941458d52718c7dbe48a741fcda80e04ca5074acf00b56b4141f1ad7931cf1863b711b016b5c8682802bcbcb"}}, &(0x7f0000000100)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0xf0ff}}, &(0x7f0000000140)={0x0, 0xf, 0xca, {0x5, 0xf, 0xca, 0x6, [@ssp_cap={0xc, 0x10, 0xa, 0x80, 0x0, 0x200, 0xff0f, 0x5}, @ssp_cap={0xc, 0x10, 0xa, 0x1, 0x0, 0x0, 0xf00, 0x7}, @wireless={0xb, 0x10, 0x1, 0x2, 0x54, 0x1f, 0x7, 0x4, 0x40}, @wireless={0xb, 0x10, 0x1, 0x2, 0x1, 0x40, 0x2, 0xfff, 0x3f}, @ptm_cap={0x3}, @generic={0x94, 0x10, 0xb, "0d0999c2d944b6d9cd19fdb08b72652de9613de5d572e4ace4cd38b46df6d368620c065fd13b560a2944b0d5eff897065938552c01a8ee944b262b7149b3432ab5f70fe69e5d56b51e5b8973429d866c9d6c45af1146f341af9a83fb8b401c7b6c410eacf277acb30c34d38662e33fb6b940e00d73c1480f0d59be854bb2f83adf5d71ffe7f5f718de2969c8eabe5593f2"}]}}, &(0x7f0000000240)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x3, 0x8, "26c0e2fc", "10c9dd8b"}}, &(0x7f0000000280)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x4e, 0x18, 0x9, 0x0, 0x80, 0x401, 0x1}}}, &(0x7f0000000780)={0x84, &(0x7f0000000300)={0x20, 0x11, 0x66, "0111987fcc4cab6d791f67d7b2c875e24881ab9287d443c864c79da2e0aa9b38da0cfb484b7151794e7c2a78d7a552fd698198458210e24aeabb3c898bfc1ae4def4256d8270d7c10615f6ca9c45b3437e50f083caf7d75ee7c36b2f41b848398da353a0a793"}, &(0x7f0000000380)={0x0, 0xa, 0x1, 0x9e}, &(0x7f00000003c0)={0x0, 0x8, 0x1, 0xfa}, &(0x7f0000000400)={0x20, 0x0, 0x4, {0x1, 0x1}}, &(0x7f0000000440)={0x20, 0x0, 0x4, {0x120}}, &(0x7f0000000480)={0x40, 0x7, 0x2}, &(0x7f00000004c0)={0x40, 0x9, 0x1, 0x81}, &(0x7f0000000500)={0x40, 0xb, 0x2, "0155"}, &(0x7f0000000580)={0x40, 0xf, 0x2, 0x5}, &(0x7f00000005c0)={0x40, 0x13, 0x6, @multicast}, &(0x7f0000000600)={0x40, 0x17, 0x6, @broadcast}, &(0x7f0000000640)={0x40, 0x19, 0x2, "99c9"}, &(0x7f0000000680)={0x40, 0x1a, 0x2, 0x1}, &(0x7f00000006c0)={0x40, 0x1c, 0x1, 0x20}, &(0x7f0000000700)={0x40, 0x1e, 0x1, 0x7f}, &(0x7f0000000740)={0x40, 0x21, 0x1}}) 02:11:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x5a0) 02:11:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x41}, 0x1c) 02:11:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:16 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x7, 0x0, @dev, 0x6}, 0x1c) 02:11:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x2, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_NAME={0xfffffffffffffecc, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x38}}, 0x8800) 02:11:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x2, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_NAME={0xfffffffffffffecc, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x38}}, 0x8800) 02:11:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async, rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)={0x38, 0x2, 0x8, 0x201, 0x0, 0x0, {0x5}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6007}, @CTA_TIMEOUT_NAME={0xfffffffffffffecc, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x38}}, 0x8800) (rerun: 32) 02:11:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x3f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x1c) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'wg1\x00', {0x2, 0x0, @dev}}) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x0, 0x2, 0x3, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="89b484c919ee8c20ba01393b6ce68f7379f33410d480fe367b211e982f0895c3a089b42813c746a7b8ddf2265c3cf547ccdb270cedd8669abb5082e57434162a6215b711b789a7d786e07bc1b8ae82846bfd413c09f1e6dc1edfbb4371e53e40a372c24b457d802e7627e60562640e53f0df4a454da4be0fc05043fd243e851ad327cd6d1f230b4d270674be5540285ee517f05a28b53fb4c9aa672da3", 0x9d}, {&(0x7f0000000300)="16569eb07ceec3e4408f68a14dc9662ac44bc6484ee30c2136c628e34ef94dc7535673746cecaa9ebf0e3a1b52c7b8225a7802d821c0bfd7220fedc81252298b21de65010d9457f89d0f818fc55da281fbb520f007d39210097e1b9f5aeaffe1c3f170152cac3f644e1298b6e18d9cd262ec98fa2bed2fac578607e4c9aa4f80c2974000cdc4d1db2957478589872d8fe9fb5bff", 0x94}, {&(0x7f00000003c0)="30337aa77d", 0x5}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x380}}, {{&(0x7f00000007c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000840)="2acb54d8bbdaf7877c3479e16960474e1d5bb48a1e68d018304fbfa5206c273d0be0ecd0bcca2512265f4f481675a3524758e2aa8f9ed70288686ca5cbf276abfd9f3df03c3916a3d08b254f8e3618d0dd18b8bd780479c36ee053a776635c1ba4acf53811239eac3a142e4d96250b919c263280112be8c1488c3e81e731534a53f45df10c978bc42b73a15e56cdd95df32b434b38f4cde4ee36d0207444d4b6a50f03dc4820fae068cc7c88da9178a2549271b08f7ca0c176f335e1ba067ab8b2d29acb22131d258de2eb", 0xcb}, {&(0x7f0000000940)="f798de9bd8225ebb4c0ac3f1b1cad730ae8581b5b278f9c9f33c32f2e779c5b130bc6600e85e3033fbbeb660627edb76551523269df82c212266a3d1ab935ccbf89061e3b5772e0b22fcd68b60faf2e16e17ebf84f17b99410942a6dfc0c449bc718aaf9e92d8fbde65d145b1dc6472157dd4c27839b762c85fad86d3060d56150f0d8acf9", 0x85}, {&(0x7f0000000a00)="2e277f6b26c647020fbf2105854aa5a94f62bbff0d936c2f7d8ec6502ea956558ee80119c60a5a9d3880587d2cd09d39692e242f57151b09e0e1f171766f1936d9dc1f44f4ca9103d563dab225681fab4e441d9cb36c70703a25468004be6aa7bd65904960f526970934600cbaef2773b4ed0e231aa4a23cfdefa0c257f860db9b63fd1c291b91f57b9fa512d4680368b28c2262480c369e0da0b862bc5e8bc1b7cb877c8f34c0d5d035ba54777ba052d36508e547fadc538e0b67464fa6f7cd31767e433452502d313188525e", 0xcd}, {&(0x7f0000000b00)="833860fef4657d78cde0a6755c6497731956aa288cfd79b18e1a7518841e82c513e59c0537c12de157e290bb9754e95c265816329db3094c2c7bbb2d85b5d88654ab5bf84d8f278f502d1ad58fa3b375c180b17ba42d00946c896fb321eb737b68b4475062dd7ffef080d93b28bc6e753bf2", 0x72}, {&(0x7f0000000b80)="220892b4dd812f61b3a930d9aa6744948300aad3b27c936f9e6d986ebd2571432acfcd8bded23cb915e10854f77abf97f61b3228a65a928dcb1a1035fd7a4ca502d6f58650e4fdb36490eba0c7d69f7b7fe86a536fcbe95d0d5cd04da1c2f282bc500b55b3b0bb3f047e86a21f97040569c6397825c72b0506f7411449593ec70200570c41dd011172b915f2bf596af44ed847c60fcd6075bd641a7c462911c9cc952cfd4e9659ee552d8aaf4c4892a251aeaa6ef41a5e76b4527e83ca46ff84123783f67a092db3c4750cc3ca2ac1c6fa7e01dc8e", 0xd5}], 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1b0}}], 0x2, 0x20041015) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000f40)=@gcm_256={{0x303}, "ee1c4f8f58026ef0", "5580b0244873b869922b2d6e0bc0577d71ef573600b905ee3cce418d9c9fa4a7", "d1591b6e", "8ffab872076c5fd3"}, 0x38) 02:11:16 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x3f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x1c) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'wg1\x00', {0x2, 0x0, @dev}}) (async, rerun: 32) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x0, 0x2, 0x3, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="ae1c3ea9e6df14ada8795ecc5de469884e6ce64c59b48c75e184b8d9cbdf769ba202faa0ccbcdd0ef1ea1377183aa2c83bad76c4eddbcfd883e44e014d4deba54929699bdb5efd644b404baaecdc7aa13b2e4a0dfc814ce0a138bfb32610debd326a2400be4f426b7d6ce28ba0d55b2a608f0adf2011a27752907cb652ab22b4d150b423625eacd5046d8c79316b1f0047609da72ae5202225a50dd0ffdff93ca3129f2b7f14e56176cc30b1c606592f1e5cc6f4719bae5fb9124033a7527eccc2904d0cf7d5703ac33a9db281d4d11dabc9143e2af0e01bbd4bcb75c28a0b9b44f0cbdc15a2d015dd8fddd6bb2b3f72048361d5c7e35df71849058f87b116", 0xff}, {&(0x7f0000000240)="89b484c919ee8c20ba01393b6ce68f7379f33410d480fe367b211e982f0895c3a089b42813c746a7b8ddf2265c3cf547ccdb270cedd8669abb5082e57434162a6215b711b789a7d786e07bc1b8ae82846bfd413c09f1e6dc1edfbb4371e53e40a372c24b457d802e7627e60562640e53f0df4a454da4be0fc05043fd243e851ad327cd6d1f230b4d270674be5540285ee517f05a28b53fb4c9aa672da3", 0x9d}, {&(0x7f0000000300)="16569eb07ceec3e4408f68a14dc9662ac44bc6484ee30c2136c628e34ef94dc7535673746cecaa9ebf0e3a1b52c7b8225a7802d821c0bfd7220fedc81252298b21de65010d9457f89d0f818fc55da281fbb520f007d39210097e1b9f5aeaffe1c3f170152cac3f644e1298b6e18d9cd262ec98fa2bed2fac578607e4c9aa4f80c2974000cdc4d1db2957478589872d8fe9fb5bff", 0x94}, {&(0x7f00000003c0)="30337aa77d", 0x5}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x380}}, {{&(0x7f00000007c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000840)="2acb54d8bbdaf7877c3479e16960474e1d5bb48a1e68d018304fbfa5206c273d0be0ecd0bcca2512265f4f481675a3524758e2aa8f9ed70288686ca5cbf276abfd9f3df03c3916a3d08b254f8e3618d0dd18b8bd780479c36ee053a776635c1ba4acf53811239eac3a142e4d96250b919c263280112be8c1488c3e81e731534a53f45df10c978bc42b73a15e56cdd95df32b434b38f4cde4ee36d0207444d4b6a50f03dc4820fae068cc7c88da9178a2549271b08f7ca0c176f335e1ba067ab8b2d29acb22131d258de2eb", 0xcb}, {&(0x7f0000000940)="f798de9bd8225ebb4c0ac3f1b1cad730ae8581b5b278f9c9f33c32f2e779c5b130bc6600e85e3033fbbeb660627edb76551523269df82c212266a3d1ab935ccbf89061e3b5772e0b22fcd68b60faf2e16e17ebf84f17b99410942a6dfc0c449bc718aaf9e92d8fbde65d145b1dc6472157dd4c27839b762c85fad86d3060d56150f0d8acf9", 0x85}, {&(0x7f0000000a00)="2e277f6b26c647020fbf2105854aa5a94f62bbff0d936c2f7d8ec6502ea956558ee80119c60a5a9d3880587d2cd09d39692e242f57151b09e0e1f171766f1936d9dc1f44f4ca9103d563dab225681fab4e441d9cb36c70703a25468004be6aa7bd65904960f526970934600cbaef2773b4ed0e231aa4a23cfdefa0c257f860db9b63fd1c291b91f57b9fa512d4680368b28c2262480c369e0da0b862bc5e8bc1b7cb877c8f34c0d5d035ba54777ba052d36508e547fadc538e0b67464fa6f7cd31767e433452502d313188525e", 0xcd}, {&(0x7f0000000b00)="833860fef4657d78cde0a6755c6497731956aa288cfd79b18e1a7518841e82c513e59c0537c12de157e290bb9754e95c265816329db3094c2c7bbb2d85b5d88654ab5bf84d8f278f502d1ad58fa3b375c180b17ba42d00946c896fb321eb737b68b4475062dd7ffef080d93b28bc6e753bf2", 0x72}, {&(0x7f0000000b80)="220892b4dd812f61b3a930d9aa6744948300aad3b27c936f9e6d986ebd2571432acfcd8bded23cb915e10854f77abf97f61b3228a65a928dcb1a1035fd7a4ca502d6f58650e4fdb36490eba0c7d69f7b7fe86a536fcbe95d0d5cd04da1c2f282bc500b55b3b0bb3f047e86a21f97040569c6397825c72b0506f7411449593ec70200570c41dd011172b915f2bf596af44ed847c60fcd6075bd641a7c462911c9cc952cfd4e9659ee552d8aaf4c4892a251aeaa6ef41a5e76b4527e83ca46ff84123783f67a092db3c4750cc3ca2ac1c6fa7e01dc8e", 0xd5}], 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1b0}}], 0x2, 0x20041015) (rerun: 32) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000f40)=@gcm_256={{0x303}, "ee1c4f8f58026ef0", "5580b0244873b869922b2d6e0bc0577d71ef573600b905ee3cce418d9c9fa4a7", "d1591b6e", "8ffab872076c5fd3"}, 0x38) 02:11:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x3f, @private2={0xfc, 0x2, '\x00', 0x1}, 0xd}, 0x1c) ioctl$sock_inet_SIOCGIFADDR(r1, 0x8915, &(0x7f0000000080)={'wg1\x00', {0x2, 0x0, @dev}}) (async) sendmmsg(r0, &(0x7f0000000ec0)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @remote}, 0x0, 0x2, 0x3, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="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", 0xff}, {&(0x7f0000000240)="89b484c919ee8c20ba01393b6ce68f7379f33410d480fe367b211e982f0895c3a089b42813c746a7b8ddf2265c3cf547ccdb270cedd8669abb5082e57434162a6215b711b789a7d786e07bc1b8ae82846bfd413c09f1e6dc1edfbb4371e53e40a372c24b457d802e7627e60562640e53f0df4a454da4be0fc05043fd243e851ad327cd6d1f230b4d270674be5540285ee517f05a28b53fb4c9aa672da3", 0x9d}, {&(0x7f0000000300)="16569eb07ceec3e4408f68a14dc9662ac44bc6484ee30c2136c628e34ef94dc7535673746cecaa9ebf0e3a1b52c7b8225a7802d821c0bfd7220fedc81252298b21de65010d9457f89d0f818fc55da281fbb520f007d39210097e1b9f5aeaffe1c3f170152cac3f644e1298b6e18d9cd262ec98fa2bed2fac578607e4c9aa4f80c2974000cdc4d1db2957478589872d8fe9fb5bff", 0x94}, {&(0x7f00000003c0)="30337aa77d", 0x5}], 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="e0000000000000000e010000ffff000022630b60d7c067cac12e52dc56eab16a44a87bc325ccc051258cfc264ec02602380842075ca0046708f3bc9c28543f8fd286d88be6c55fecfbdec1029d46a208594e75535f639e6a91fac176eebe73f68a5eb687e2cede0bf8a212d7ea911e278298679f475f80338a2a839b09b3cc4feeadd69c840dae8958a7746815ebbe7c265411b95cd024176c45bcd6afae262d4b51537a0dc95ab2c6324bc48624333964c89cef7acb686f41ad7ac906527da0c2c2cf8575cf7846c6d5348d1e74e5be7f98f5641682a41de9de59c208000000880000000000000012010000050000007364beed87201b8a0f9d51ece15320ce78f86bff9d2b147756e207eea5e7ef9a2aa979758fa4951a5cebf7834bbbb34734cc51272a611958f687249c47cdbe4fda44b46262b1d6e8e8e566c714f32d6184f2ae41253a1607cebb15fa686499964c33e31bc98900bada4a2308bd001bdc8a4e1196d3000000e8000000000000000c010000070000008f3bfd7fdfa44f14691af9f8c70c1eae5b645d1c68114c9daa7e6c02ac6dd3246a75c8e8ae72dc0f3ff1d4c1c292c85c7f75e28739f70ca32dc9cf0e9df882fd833616ff64eddaf7f6b8811dea68eec81dd0fb4175e7177af4313e3d443192348d74c218e95e9fd689eab2d36e1c409a1d48a9f90b1e837d8dd310b7de3bc77862e032e3c8f4c64bdb4da26d2b2b00954324ee95b47382acadd27ba7b0c34f73ad8cf0a4ffa6885f61228effd1ee7bed9be98abc51d47faafe90392c484f1996b8ea22554f48044e0e2b8110780ecf9ddbf4632f764000000801000000000000ff000000000000006ded0940be001c380235bd77ff0be139f9e02bb8cb9ce723d6e4c7f42f965d792dae59c09f90f410dc9a9ba1f773d9a651286c92e8304ae9f8902d3fc5b91931abab82b31e436a4954dfb2db0c061375c7e1069d1d283d4563e7cad79a21ae8ea71d8212282942505a19812832ad07897cbff924d4735a7739ad7d9b4ffcf55190daf4bb8d5f9c6ab0e193799ebd78bcbdb7287d76e4384c4cad266fc081f775e70f855e94b88745d88f472fe0dbf6a80d34398fe009f640179f565a6cc7ddf232e007ab12c8eed84b499c4d460f1f04fded769242229f694a2fe6975d7818b551222908fea11054189f62a7bcd16639f70000000000000028000000000000007b0000005aa90000fe1e006d6df2525c46b6cb5bab084bfc80a6bbc9e1000000"], 0x380}}, {{&(0x7f00000007c0)=@ieee802154={0x24, @long={0x3, 0x3, {0xaaaaaaaaaaaa0002}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000840)="2acb54d8bbdaf7877c3479e16960474e1d5bb48a1e68d018304fbfa5206c273d0be0ecd0bcca2512265f4f481675a3524758e2aa8f9ed70288686ca5cbf276abfd9f3df03c3916a3d08b254f8e3618d0dd18b8bd780479c36ee053a776635c1ba4acf53811239eac3a142e4d96250b919c263280112be8c1488c3e81e731534a53f45df10c978bc42b73a15e56cdd95df32b434b38f4cde4ee36d0207444d4b6a50f03dc4820fae068cc7c88da9178a2549271b08f7ca0c176f335e1ba067ab8b2d29acb22131d258de2eb", 0xcb}, {&(0x7f0000000940)="f798de9bd8225ebb4c0ac3f1b1cad730ae8581b5b278f9c9f33c32f2e779c5b130bc6600e85e3033fbbeb660627edb76551523269df82c212266a3d1ab935ccbf89061e3b5772e0b22fcd68b60faf2e16e17ebf84f17b99410942a6dfc0c449bc718aaf9e92d8fbde65d145b1dc6472157dd4c27839b762c85fad86d3060d56150f0d8acf9", 0x85}, {&(0x7f0000000a00)="2e277f6b26c647020fbf2105854aa5a94f62bbff0d936c2f7d8ec6502ea956558ee80119c60a5a9d3880587d2cd09d39692e242f57151b09e0e1f171766f1936d9dc1f44f4ca9103d563dab225681fab4e441d9cb36c70703a25468004be6aa7bd65904960f526970934600cbaef2773b4ed0e231aa4a23cfdefa0c257f860db9b63fd1c291b91f57b9fa512d4680368b28c2262480c369e0da0b862bc5e8bc1b7cb877c8f34c0d5d035ba54777ba052d36508e547fadc538e0b67464fa6f7cd31767e433452502d313188525e", 0xcd}, {&(0x7f0000000b00)="833860fef4657d78cde0a6755c6497731956aa288cfd79b18e1a7518841e82c513e59c0537c12de157e290bb9754e95c265816329db3094c2c7bbb2d85b5d88654ab5bf84d8f278f502d1ad58fa3b375c180b17ba42d00946c896fb321eb737b68b4475062dd7ffef080d93b28bc6e753bf2", 0x72}, {&(0x7f0000000b80)="220892b4dd812f61b3a930d9aa6744948300aad3b27c936f9e6d986ebd2571432acfcd8bded23cb915e10854f77abf97f61b3228a65a928dcb1a1035fd7a4ca502d6f58650e4fdb36490eba0c7d69f7b7fe86a536fcbe95d0d5cd04da1c2f282bc500b55b3b0bb3f047e86a21f97040569c6397825c72b0506f7411449593ec70200570c41dd011172b915f2bf596af44ed847c60fcd6075bd641a7c462911c9cc952cfd4e9659ee552d8aaf4c4892a251aeaa6ef41a5e76b4527e83ca46ff84123783f67a092db3c4750cc3ca2ac1c6fa7e01dc8e", 0xd5}], 0x5, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], 0x1b0}}], 0x2, 0x20041015) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000f40)=@gcm_256={{0x303}, "ee1c4f8f58026ef0", "5580b0244873b869922b2d6e0bc0577d71ef573600b905ee3cce418d9c9fa4a7", "d1591b6e", "8ffab872076c5fd3"}, 0x38) 02:11:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x600) 02:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0x45}, 0x1c) 02:11:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:19 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x8, 0x0, @dev, 0x6}, 0x1c) 02:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x25dfdbfe, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000010000000b000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000000706030000000000000000000000000a0904020073797a3100000000090002007379000640000000400900020073797a3200000000080006400000010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24008880}, 0x4000880) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:19 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000010000000b000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000000706030000000000000000000000000a0904020073797a3100000000090002007379000640000000400900020073797a3200000000080006400000010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24008880}, 0x4000880) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) (async) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000010000000b000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000000706030000000000000000000000000a0904020073797a3100000000090002007379000640000000400900020073797a3200000000080006400000010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24008880}, 0x4000880) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x700) 02:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000080)=ANY=[@ANYBLOB="01000000010000000b000000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0\x00']) (async) sendmsg$IPSET_CMD_LIST(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000000706030000000000000000000000000a0904020073797a3100000000090002007379000640000000400900020073797a3200000000080006400000010000000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x24008880}, 0x4000880) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:19 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:19 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="a80000003600000429bd7000ffdbdf255b41cca98649431c8a27dc7ac632d0da5541b6c1f3a44713e600683831383112916e2130c01ddede6bafd22bd5fa2dfdcd0d2a14678304a7c1566f24515010df927afa660a1e98811418f280f7d4cf88fd0aef995783d862529314959fdc5e21e791b1f0db9394a339aa16734e3fdb5f3f541867809938046ce7dfd1ef1f304b58a666afd5a0b9400e4ba4663a0000"], 0xa8}, {&(0x7f0000000880)=ANY=[@ANYBLOB="b80200002500200026bd7000fbdbdf25cf00000004001200a780c8d26b915dde008172e63d5da4b85c8fb74ad7dc03f7177a768d708c8aa1aafd163f89", @ANYRES32, @ANYBLOB="83663d29864720d8d688d04e38bf9bf89906d4738b93c6b3d6cbac7af64028c2c16f1b8c04024afa05816b780acc048de48c96135ddc2fdb7a0064305fa3bb9730b8d0e49179a11a7f7795bb3d12215a4990a3e8845850fc33a196ec578508f0e05b006e1f25127b04acb446d39e1bcb99272be73f5d6316c1901ccc69be94ba98ad3305955f4a169e6b2e0a5acef39028fa8577e1f3ecf914071b8b0f8b5d5083b7485f26e843432d174e90097134bc9cd6c14988f4899440dd36", @ANYRES32=r4, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB='\x00'], 0x2b8}, {&(0x7f0000002980)={0x1a58, 0xfffc, 0x10, 0x70bd2d, 0x9, "", [@nested={0x734, 0x8d, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='m\x00'}, @generic="5300000000000000dc38187c413c269267b39fbec7f5a9a39561d02e13f247eda9", @generic="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", @typed={0x8, 0x11, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}, @typed={0x59, 0xa, 0x0, 0x0, @binary="1eed0cff7021dda86f22eec86000c14bbf15c35fcfd8bc985277d08fa3d184619bd49017470ee8683f456108cc23369d42683d4cda66c120ec17a4c891b063c430a6966a4e6749adb96000b72d30fd8c9b1352d701"}, @nested={0x1269, 0x69, 0x0, 0x1, [@generic="7a98328fc76bc2081a855c1ba7ac29fb7cb24b5bddcce385b826eeb2585343bedacc9b5b6a6d2d24dfae2ff28e0acda64eb9f8044f7e5e07ac59d5f68641bb1bc0b6e1ed7cf497b4be8eab913fefb81cf7e9804e653a49389b9cb5a32b4cbf35beca0d66c79e721ea89d843030311e2c42b9adebc32c00a64bf5e48379c2fd36afdf568e4cd7568e66990345074c7a0f166e0a37", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @typed={0xe1, 0xe, 0x0, 0x0, @binary="275285bb3c75a33e4793d85b94ab5451d10d0380f81c94e842cc0c3976c09d8aa194cd31c23fdbda498c7112fbd679240bb2f1881c081690673422036de8a4a7a6c4bd0dd8b0b1071195b9a252396f920e3b9442e769c37512374f038e3b1746048be044dc4f46a9ae1049c5f44e78776064c72739a3acbd9071a4968a49a6158cbcb1ee241f466a3a0f2d80df006bf284a30768d0acaf9ba380549e80e3067629f5446595d135e10a91e00e3f0730a5e8510feef74b44671e297cd1465b11482902103a9e80c196192e9d32c8a9fa5c51d4066f0d277c1de359856421"}, @typed={0x4, 0x50}, @generic="42390bc3d11f2db69976470a9d8e2b55a039331117a0f1cdff5a6d2df791342933f78055afefba25c88be5b4b9db5a1963def4f43fbd0b805575963c8a255188bab1391452b86194c4f0c6bdccbfdb29a669389c8d", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x6}, @generic, @generic="d2c471c02397625544b5213653ff0d12d8dfb459013096d458fa5493ab019bb8f6021de69d652e5865e1cf1d6c50d35643dd8e867e33daa3c64102bcf9b6f2dda489ff975cc83b010bbdb520976a4f11de019657291e755f93a1dfb1f3960003d08b383c4a256eb864801115", @generic="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"]}, @generic="2fbc29e5e96ade303b98130ca49619dccb66f0f7dda78a43c2cc499b236955637f473361e4fd520f195333d4c7b91e279f7059709cfb9f178edb121bc28ae34ef3f722737a51"]}, 0x1a58}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="800200002a0004f0008035ae11d9f6baf6235ecae3f9a568ebc244144b2a1b471ce65e320fab164a4bd8c5a2ce97ed6228c55e51f1b6cc744b104b622f84f1fcd4ae558bdd5198bb496f66453fac943e7933474d12cf61a2801ba25f803a28d9750d380618aa5798", @ANYRESHEX=r3, @ANYBLOB="14006100fe8000000000000000000000000000aabfb4c327513af50ed90ae2bd0a87280a99b62160ff076c4b5c1dde67b06f0554d6c81ae2ce88adf3ded4cc5063b5ee5a2c38304f2d8e64e1c1e1608e44e6819f245be2705582c379b58eccf0cc19f69d96a4accb176f08e8f9fb003c817776a6ff834481cfd602f4834445301897fdc39df0467e16818df72a6e66fbf1af54a88603088e9ee412ba6f60d23a2751c6b20bd9549ea6e87da0260ffda06f51c9e75a851abbdd7f2e7d8c03b861313d6e7bad195bd39febfba6955b7d4de20827a24d3b6df77fd0c458914ea4f72559de3433ad23a37dae153b23c251c8f45687af8872c349055d2468a2d78a2cd5998a006f80a75d9aa01daf586347dd291d1fadc802830d84539f936f08fc6f1f609461fdfee1bcc6637cf25ecf112d880e15bd4cfb32409838d11c26bbdd2c667d9246d5981102e1c208619e59fd4356e9d3eceb8d647ddf81f7eb7b371385f503340dd8f4e370f09c18bf5957f37cda9efd76180d116d73d132e670f46482d3da9411c52c4d012e2673bb000040009380d6b58c6d96ce4617d9d85821a1fd464c010fc0b483f3b0b2f907510292d8fb26ed61bb50da2e60660580108966d601710652ca23c6a3df073e01750c040086002f8986f08a516b1137e0645750791afb9c46728b0f0a6bb71dc27554f45b1e3545ae0af7ae089c52f1b6e3f5adadc145724013431915fc54524646daceefc3fdc56c7bb752c1785e4f0efb10f93744ac7df6b19de27fb2b9eb13c11baa5394a60a0ad02489f00c979c64d7c7dfb4efa6b1fb48f5dabb993a2fc7380bf2ec73dba3f3c22eb267014f1a82430800380000000000000000b02429a8999cbe0ae5b161ac7b4352f2d1cc2b3793"], 0x280}], 0x4, &(0x7f0000000480), 0x0, 0x8001}, 0x800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 02:11:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:20 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x9, 0x0, @dev, 0x6}, 0x1c) 02:11:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xb) 02:11:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x880) 02:11:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000000)) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0xe) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xc) 02:11:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$netlink(0x10, 0x3, 0xe) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$netlink(0x10, 0x3, 0xe) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xd) 02:11:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xf) 02:11:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc) (async, rerun: 64) socket$netlink(0x10, 0x3, 0xe) (rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:20 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x17) 02:11:21 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xa, 0x0, @dev, 0x6}, 0x1c) 02:11:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="a80000003600000429bd7000ffdbdf255b41cca98649431c8a27dc7ac632d0da5541b6c1f3a44713e600683831383112916e2130c01ddede6bafd22bd5fa2dfdcd0d2a14678304a7c1566f24515010df927afa660a1e98811418f280f7d4cf88fd0aef995783d862529314959fdc5e21e791b1f0db9394a339aa16734e3fdb5f3f541867809938046ce7dfd1ef1f304b58a666afd5a0b9400e4ba4663a0000"], 0xa8}, {&(0x7f0000000880)=ANY=[@ANYBLOB="b80200002500200026bd7000fbdbdf25cf00000004001200a780c8d26b915dde008172e63d5da4b85c8fb74ad7dc03f7177a768d708c8aa1aafd163f89", @ANYRES32, @ANYBLOB="83663d29864720d8d688d04e38bf9bf89906d4738b93c6b3d6cbac7af64028c2c16f1b8c04024afa05816b780acc048de48c96135ddc2fdb7a0064305fa3bb9730b8d0e49179a11a7f7795bb3d12215a4990a3e8845850fc33a196ec578508f0e05b006e1f25127b04acb446d39e1bcb99272be73f5d6316c1901ccc69be94ba98ad3305955f4a169e6b2e0a5acef39028fa8577e1f3ecf914071b8b0f8b5d5083b7485f26e843432d174e90097134bc9cd6c14988f4899440dd36", @ANYRES32=r4, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB='\x00'], 0x2b8}, {&(0x7f0000002980)={0x1a58, 0xfffc, 0x10, 0x70bd2d, 0x9, "", [@nested={0x734, 0x8d, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='m\x00'}, @generic="5300000000000000dc38187c413c269267b39fbec7f5a9a39561d02e13f247eda9", @generic="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", @typed={0x8, 0x11, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}, @typed={0x59, 0xa, 0x0, 0x0, @binary="1eed0cff7021dda86f22eec86000c14bbf15c35fcfd8bc985277d08fa3d184619bd49017470ee8683f456108cc23369d42683d4cda66c120ec17a4c891b063c430a6966a4e6749adb96000b72d30fd8c9b1352d701"}, @nested={0x1269, 0x69, 0x0, 0x1, [@generic="7a98328fc76bc2081a855c1ba7ac29fb7cb24b5bddcce385b826eeb2585343bedacc9b5b6a6d2d24dfae2ff28e0acda64eb9f8044f7e5e07ac59d5f68641bb1bc0b6e1ed7cf497b4be8eab913fefb81cf7e9804e653a49389b9cb5a32b4cbf35beca0d66c79e721ea89d843030311e2c42b9adebc32c00a64bf5e48379c2fd36afdf568e4cd7568e66990345074c7a0f166e0a37", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @typed={0xe1, 0xe, 0x0, 0x0, @binary="275285bb3c75a33e4793d85b94ab5451d10d0380f81c94e842cc0c3976c09d8aa194cd31c23fdbda498c7112fbd679240bb2f1881c081690673422036de8a4a7a6c4bd0dd8b0b1071195b9a252396f920e3b9442e769c37512374f038e3b1746048be044dc4f46a9ae1049c5f44e78776064c72739a3acbd9071a4968a49a6158cbcb1ee241f466a3a0f2d80df006bf284a30768d0acaf9ba380549e80e3067629f5446595d135e10a91e00e3f0730a5e8510feef74b44671e297cd1465b11482902103a9e80c196192e9d32c8a9fa5c51d4066f0d277c1de359856421"}, @typed={0x4, 0x50}, @generic="42390bc3d11f2db69976470a9d8e2b55a039331117a0f1cdff5a6d2df791342933f78055afefba25c88be5b4b9db5a1963def4f43fbd0b805575963c8a255188bab1391452b86194c4f0c6bdccbfdb29a669389c8d", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x6}, @generic, @generic="d2c471c02397625544b5213653ff0d12d8dfb459013096d458fa5493ab019bb8f6021de69d652e5865e1cf1d6c50d35643dd8e867e33daa3c64102bcf9b6f2dda489ff975cc83b010bbdb520976a4f11de019657291e755f93a1dfb1f3960003d08b383c4a256eb864801115", @generic="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"]}, @generic="2fbc29e5e96ade303b98130ca49619dccb66f0f7dda78a43c2cc499b236955637f473361e4fd520f195333d4c7b91e279f7059709cfb9f178edb121bc28ae34ef3f722737a51"]}, 0x1a58}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="800200002a0004f0008035ae11d9f6baf6235ecae3f9a568ebc244144b2a1b471ce65e320fab164a4bd8c5a2ce97ed6228c55e51f1b6cc744b104b622f84f1fcd4ae558bdd5198bb496f66453fac943e7933474d12cf61a2801ba25f803a28d9750d380618aa5798", @ANYRESHEX=r3, @ANYBLOB="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"], 0x280}], 0x4, &(0x7f0000000480), 0x0, 0x8001}, 0x800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r0) (async) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) (async) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) (async) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) (async) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) (async) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) (async) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="a80000003600000429bd7000ffdbdf255b41cca98649431c8a27dc7ac632d0da5541b6c1f3a44713e600683831383112916e2130c01ddede6bafd22bd5fa2dfdcd0d2a14678304a7c1566f24515010df927afa660a1e98811418f280f7d4cf88fd0aef995783d862529314959fdc5e21e791b1f0db9394a339aa16734e3fdb5f3f541867809938046ce7dfd1ef1f304b58a666afd5a0b9400e4ba4663a0000"], 0xa8}, {&(0x7f0000000880)=ANY=[@ANYBLOB="b80200002500200026bd7000fbdbdf25cf00000004001200a780c8d26b915dde008172e63d5da4b85c8fb74ad7dc03f7177a768d708c8aa1aafd163f89", @ANYRES32, @ANYBLOB="83663d29864720d8d688d04e38bf9bf89906d4738b93c6b3d6cbac7af64028c2c16f1b8c04024afa05816b780acc048de48c96135ddc2fdb7a0064305fa3bb9730b8d0e49179a11a7f7795bb3d12215a4990a3e8845850fc33a196ec578508f0e05b006e1f25127b04acb446d39e1bcb99272be73f5d6316c1901ccc69be94ba98ad3305955f4a169e6b2e0a5acef39028fa8577e1f3ecf914071b8b0f8b5d5083b7485f26e843432d174e90097134bc9cd6c14988f4899440dd36", @ANYRES32=r4, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB='\x00'], 0x2b8}, {&(0x7f0000002980)={0x1a58, 0xfffc, 0x10, 0x70bd2d, 0x9, "", [@nested={0x734, 0x8d, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='m\x00'}, @generic="5300000000000000dc38187c413c269267b39fbec7f5a9a39561d02e13f247eda9", @generic="72f07a9eda9b0b7a60e22d7d18102a34ae7fedabbc521b8d0f95258f2939060a46a9123296e551b4f05321bcc1154553345b1c1ddeac9b59228e766d9ba76c9a1131e6ab29e591f33ac92ad6296816059c06bd3d4d23290f88a81a4c4b8895fa52c0e9a1f6dc0fb023ebc60ea9c6e3b175a8a55ac76368b14fb8757cb323c2855eb923911c93e874d93ff5f69dd073be1c44b9bee69b9df3964e7e54f40f83b7667e34bb1c4bd3c6f64b789d788bb24e07ffc8e5dcc57c8e38f364d0260506273ff71bb8b57b6dfc0a299a18ff019b4dbb7d6e0ef3bd4508fada32f339b82d32b0fcb2d35c3a053f3bba8e1743bdb883ff20500e5c0ccaedfc4e62c8707493138220f5456c8b11aea41c86a5d4abc642a3e8d6cf837b25824ca4fba79e39f4da285e88ed22fe9210cd536e41cd206a4608155fd1a4eaeb3d618d15ed0654154ab01d41d82e7f65cadc483cff3f111fd79dce1895be8e3f5894a857ddb0da5f4d9321dbcb15ac1c6fa40e601f96b9f77dc3fc62455d6aee2c4c86cc4d12aa9fe118b93ce2fd61c3b0564e7b94f0a81f8e85c9e741b94d5fa65fbdf4c57acc433424cc0ac1a557b5097f269d238cc862a05a8a8acbbea71a66fd080f98558e63b538796acd42fcc850d056ea08b36328fa2be7a4dee9b863d9c8552e28f602c9fc75c52dac5fc43e7196909119c0d8b4de69bed63bbff313fb19151309bccdde69d8e9e899670aaa2eea14be8dfb6de2663c580a47e396e33e9051a453a6ad33601edc005311c0a1b8e9ff43b96e94e3986f892eb601154680ba536ae678d5b1c3b2ee2371f42d008245da93954f0a80c382129c87df56be892869c9b97ba1af91c7186df230ca099f3ac1266fedda0f0dcd81cd971d313a2c04ca9e89599dc33d27d62ff82bae1fde806d438e6258fed43c35d61a8e99bbe63ecdbc173b5c4331c06c7411264a4099708a941d2e90d1e03be10957e5ce663db19a72e8ac21c3b460432b81a8cd573e51c317b85f3840d95dded33130abad180846d39d2b75e886b34e79c171d12d3d18bd4ccbf96ac0e6402f841347fdb8d5bf14e4862844901b5d9e79f38693b90a4792b28b946f1be569a1cec45ee399e2224fe5e4930195225e5710bfc25193ed682b6aa35441fbeede8debf31056c89b921cf37d719cc79394225d8bf10654823a486bada43058b0e302fd807ebe1bfcd0a8a3040ae21e02e377570912f10462a5ae0e9e6542e453799ee7f16e564c55443568c5a9e2b5376c566fef96b041077f730b6baac4e3cc5386a7d4e317eb806c955b4ae378a2aef27e0e0499f464972e7bccfb295a33e0ffd801339f65a2d442c76844f88ede650116ad1f04023e0b4c11b909a2a49f86b1c38989ec96faa4c41e102a62ff1a589299c0d193f45b046684dac3464b036e4f9b8f320ed1788dfa0c83c7973d9ee5b24af1296bfd0637fb5d38714e8ae4eba5e869389aa0f9b613562a071af824545fd36f10c126346a380d579848bcfcc0090336f978262a5c43965361a61e3d71b40b3a4ab84ec75e2b2335b356267b30526b5d1c7e05026e974d51287b839a319acb9b648b28ed06118e359e71ed495a5aeebe3ba0f63095b44902b44b98a3032f79f1f9b10f0e365587efd75a8c7a25c19b0c7004dd30fb5bea5a83405b8795bb77f89c02e399315bff2baa55633b24c18f05ee5b587d8c01f734489dd9ebfbf96dcb32fda805dd966837561f079bace6ceaeca503f2e43d5ea9b13a665e2c65de1bcb4370b757a1108ac738260d3578e69b34f6b4eda99d1229c1620897cc3dac4acb67d4e6be8188e29b257691ddac7bca2d7f8d13ab7d26e46e493123f452fd1691105f2de4b792a0f8a405ad1813233059fbb6e3e3db00caa830e3142af0f83c4a7cba663431990624dcb67047ea0381f82487024877310aa5df8e641d8cecb5fe3b0370f49004ad9e597966803d26890fa47240b1055f773c9a0070fa7b26bae808d33e398c01eed56f6468682901b6d014f7aaba0524805617321200f471e26fe77595f6b43c697feb4990c6a98b8f7765b1ee069d9fe04358d73661f9b199818e05fbb233a0f95998b812c6599e15e398849fe4913ff2de038d43f080255be457a9246aeb7e15545d78a31354c05b69fcb238be10f6c528feb240fc6d59c6e4d43cfe609159e1dc571536a7b9cdbf74c1b2023adb080d3214036ce1ff074dba7d936dd86c98b77e8893299f108b95a56a80096a36a8a5472895ab3641af30598941673a5c18acff1ce119f924b9eb5d27943335e4f9d57fa8a6a4db7c992618a7f4ea820e4ab82f9e8dcd2e6c03804fa83a9ed22a02b51f3ddbbebc8d7417851217c8e441dad90bb859cc719aae86426a7b88f272e1480947534b73a8dca65255016d9d7c488fc5b87ef51727ba43ba50379c8f6b895ef13814ecaa636341c839f4824f2f80f9c7623d7cdc00d5a55380e10f56f6d3cc4e1312e845cdf8ada1049978053d103d6876db2fa00a30fc6c322aa8da298116596a15e1f", @typed={0x8, 0x11, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}, @typed={0x59, 0xa, 0x0, 0x0, @binary="1eed0cff7021dda86f22eec86000c14bbf15c35fcfd8bc985277d08fa3d184619bd49017470ee8683f456108cc23369d42683d4cda66c120ec17a4c891b063c430a6966a4e6749adb96000b72d30fd8c9b1352d701"}, @nested={0x1269, 0x69, 0x0, 0x1, [@generic="7a98328fc76bc2081a855c1ba7ac29fb7cb24b5bddcce385b826eeb2585343bedacc9b5b6a6d2d24dfae2ff28e0acda64eb9f8044f7e5e07ac59d5f68641bb1bc0b6e1ed7cf497b4be8eab913fefb81cf7e9804e653a49389b9cb5a32b4cbf35beca0d66c79e721ea89d843030311e2c42b9adebc32c00a64bf5e48379c2fd36afdf568e4cd7568e66990345074c7a0f166e0a37", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @typed={0xe1, 0xe, 0x0, 0x0, @binary="275285bb3c75a33e4793d85b94ab5451d10d0380f81c94e842cc0c3976c09d8aa194cd31c23fdbda498c7112fbd679240bb2f1881c081690673422036de8a4a7a6c4bd0dd8b0b1071195b9a252396f920e3b9442e769c37512374f038e3b1746048be044dc4f46a9ae1049c5f44e78776064c72739a3acbd9071a4968a49a6158cbcb1ee241f466a3a0f2d80df006bf284a30768d0acaf9ba380549e80e3067629f5446595d135e10a91e00e3f0730a5e8510feef74b44671e297cd1465b11482902103a9e80c196192e9d32c8a9fa5c51d4066f0d277c1de359856421"}, @typed={0x4, 0x50}, @generic="42390bc3d11f2db69976470a9d8e2b55a039331117a0f1cdff5a6d2df791342933f78055afefba25c88be5b4b9db5a1963def4f43fbd0b805575963c8a255188bab1391452b86194c4f0c6bdccbfdb29a669389c8d", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x6}, @generic, @generic="d2c471c02397625544b5213653ff0d12d8dfb459013096d458fa5493ab019bb8f6021de69d652e5865e1cf1d6c50d35643dd8e867e33daa3c64102bcf9b6f2dda489ff975cc83b010bbdb520976a4f11de019657291e755f93a1dfb1f3960003d08b383c4a256eb864801115", @generic="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"]}, @generic="2fbc29e5e96ade303b98130ca49619dccb66f0f7dda78a43c2cc499b236955637f473361e4fd520f195333d4c7b91e279f7059709cfb9f178edb121bc28ae34ef3f722737a51"]}, 0x1a58}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="800200002a0004f0008035ae11d9f6baf6235ecae3f9a568ebc244144b2a1b471ce65e320fab164a4bd8c5a2ce97ed6228c55e51f1b6cc744b104b622f84f1fcd4ae558bdd5198bb496f66453fac943e7933474d12cf61a2801ba25f803a28d9750d380618aa5798", @ANYRESHEX=r3, @ANYBLOB="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"], 0x280}], 0x4, &(0x7f0000000480), 0x0, 0x8001}, 0x800) (async) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) (async) sendfile(r2, r3, 0x0, 0x8000002b) (async) 02:11:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xa3d) 02:11:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1b) 02:11:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x2c0) 02:11:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x7ffffffff000) 02:11:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xe00) 02:11:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0xa8aaaafffeaaaa0c) 02:11:21 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce382138f9e378f52e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799f092a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x2000, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100), 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000001c0)='GPL\x00', 0x665, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x6, 0x3135, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0]}, 0x80) splice(r3, &(0x7f00000000c0), r4, &(0x7f00000003c0)=0x7a27, 0xfffffffffffffffb, 0x9) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x11}, 0x1c) 02:11:21 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:21 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) (async, rerun: 32) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) (async, rerun: 32) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) (async, rerun: 32) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) (async, rerun: 32) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) (async, rerun: 64) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) (async, rerun: 64) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="a80000003600000429bd7000ffdbdf255b41cca98649431c8a27dc7ac632d0da5541b6c1f3a44713e600683831383112916e2130c01ddede6bafd22bd5fa2dfdcd0d2a14678304a7c1566f24515010df927afa660a1e98811418f280f7d4cf88fd0aef995783d862529314959fdc5e21e791b1f0db9394a339aa16734e3fdb5f3f541867809938046ce7dfd1ef1f304b58a666afd5a0b9400e4ba4663a0000"], 0xa8}, {&(0x7f0000000880)=ANY=[@ANYBLOB="b80200002500200026bd7000fbdbdf25cf00000004001200a780c8d26b915dde008172e63d5da4b85c8fb74ad7dc03f7177a768d708c8aa1aafd163f89", @ANYRES32, @ANYBLOB="83663d29864720d8d688d04e38bf9bf89906d4738b93c6b3d6cbac7af64028c2c16f1b8c04024afa05816b780acc048de48c96135ddc2fdb7a0064305fa3bb9730b8d0e49179a11a7f7795bb3d12215a4990a3e8845850fc33a196ec578508f0e05b006e1f25127b04acb446d39e1bcb99272be73f5d6316c1901ccc69be94ba98ad3305955f4a169e6b2e0a5acef39028fa8577e1f3ecf914071b8b0f8b5d5083b7485f26e843432d174e90097134bc9cd6c14988f4899440dd36", @ANYRES32=r4, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB='\x00'], 0x2b8}, {&(0x7f0000002980)={0x1a58, 0xfffc, 0x10, 0x70bd2d, 0x9, "", [@nested={0x734, 0x8d, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='m\x00'}, @generic="5300000000000000dc38187c413c269267b39fbec7f5a9a39561d02e13f247eda9", @generic="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", @typed={0x8, 0x11, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}, @typed={0x59, 0xa, 0x0, 0x0, @binary="1eed0cff7021dda86f22eec86000c14bbf15c35fcfd8bc985277d08fa3d184619bd49017470ee8683f456108cc23369d42683d4cda66c120ec17a4c891b063c430a6966a4e6749adb96000b72d30fd8c9b1352d701"}, @nested={0x1269, 0x69, 0x0, 0x1, [@generic="7a98328fc76bc2081a855c1ba7ac29fb7cb24b5bddcce385b826eeb2585343bedacc9b5b6a6d2d24dfae2ff28e0acda64eb9f8044f7e5e07ac59d5f68641bb1bc0b6e1ed7cf497b4be8eab913fefb81cf7e9804e653a49389b9cb5a32b4cbf35beca0d66c79e721ea89d843030311e2c42b9adebc32c00a64bf5e48379c2fd36afdf568e4cd7568e66990345074c7a0f166e0a37", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @typed={0xe1, 0xe, 0x0, 0x0, @binary="275285bb3c75a33e4793d85b94ab5451d10d0380f81c94e842cc0c3976c09d8aa194cd31c23fdbda498c7112fbd679240bb2f1881c081690673422036de8a4a7a6c4bd0dd8b0b1071195b9a252396f920e3b9442e769c37512374f038e3b1746048be044dc4f46a9ae1049c5f44e78776064c72739a3acbd9071a4968a49a6158cbcb1ee241f466a3a0f2d80df006bf284a30768d0acaf9ba380549e80e3067629f5446595d135e10a91e00e3f0730a5e8510feef74b44671e297cd1465b11482902103a9e80c196192e9d32c8a9fa5c51d4066f0d277c1de359856421"}, @typed={0x4, 0x50}, @generic="42390bc3d11f2db69976470a9d8e2b55a039331117a0f1cdff5a6d2df791342933f78055afefba25c88be5b4b9db5a1963def4f43fbd0b805575963c8a255188bab1391452b86194c4f0c6bdccbfdb29a669389c8d", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x6}, @generic, @generic="d2c471c02397625544b5213653ff0d12d8dfb459013096d458fa5493ab019bb8f6021de69d652e5865e1cf1d6c50d35643dd8e867e33daa3c64102bcf9b6f2dda489ff975cc83b010bbdb520976a4f11de019657291e755f93a1dfb1f3960003d08b383c4a256eb864801115", @generic="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"]}, @generic="2fbc29e5e96ade303b98130ca49619dccb66f0f7dda78a43c2cc499b236955637f473361e4fd520f195333d4c7b91e279f7059709cfb9f178edb121bc28ae34ef3f722737a51"]}, 0x1a58}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="800200002a0004f0008035ae11d9f6baf6235ecae3f9a568ebc244144b2a1b471ce65e320fab164a4bd8c5a2ce97ed6228c55e51f1b6cc744b104b622f84f1fcd4ae558bdd5198bb496f66453fac943e7933474d12cf61a2801ba25f803a28d9750d380618aa5798", @ANYRESHEX=r3, @ANYBLOB="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"], 0x280}], 0x4, &(0x7f0000000480), 0x0, 0x8001}, 0x800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 02:11:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x7ffffffff000) 02:11:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x873}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x20088000) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x200480c0) 02:11:22 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xe, 0x0, @dev, 0x6}, 0x1c) 02:11:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1f00) 02:11:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:22 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xa3d) 02:11:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x873}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x20088000) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x200480c0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$netlink(0x10, 0x3, 0x8) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x873}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x20088000) (async) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x200480c0) (async) 02:11:22 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$netlink(0x10, 0x3, 0x8) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x58, 0x2, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @icmpv6=[@CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x81}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x3}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x80}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x873}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_TIMEOUT_ICMPV6_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40800}, 0x20088000) sendmsg$IPSET_CMD_GET_BYINDEX(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0xf, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x4}, @IPSET_ATTR_INDEX={0x6, 0xb, 0xffffffffffffffff}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x200480c0) 02:11:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x2700) 02:11:22 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) (async, rerun: 64) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce382138f9e378f52e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799f092a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) (async) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x2000, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async, rerun: 64) r3 = socket$packet(0x11, 0x2, 0x300) (rerun: 64) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100), 0x4) (async, rerun: 64) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000001c0)='GPL\x00', 0x665, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x6, 0x3135, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0]}, 0x80) (rerun: 64) splice(r3, &(0x7f00000000c0), r4, &(0x7f00000003c0)=0x7a27, 0xfffffffffffffffb, 0x9) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x11}, 0x1c) 02:11:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x18, 0x990, 0x913, 0x1, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x7, 0xd, 0x1, 0x0, 'R9y'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x201, 0x0, 0x0, {0xf}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x2}]}}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x1b0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x63, 0xc, "6c75f79c5d2be0bb74f9feb12946ff5d426be617a416e4ac77533b13d2b1268346e6c6f46ec82c4dad95baaf51607e499c0fa963e1a56ab19362f37bc16fd4cf0cab436ba5ece30a71cc8b82e1bbce9530fd57d9b8c9c1b9ed5106b34051bd"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "642b32f81cf086fcc0d2f407060f3c482dbcd753cecfe3b086963fe767317f9055e6772c208a364691c4119f0b582bb43cb82f98e4898b991aff03b0021bb9b73d4c6909df8f3f1578d9a8f62e160f5e38fb6b883dda9fc0ba2bb99f9cac3bf9ad76ee022bbf159f9737aa09a92245daafefa7388e7e9a5cd694667435c5753c97c75464cde5486c7d3b5faa691bea19167bff15ac9746a713b6804ec72269b1cc628f92c61784d4e93b64"}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0x5d, 0xc, "4e5a91ba0a9005f2ac6b2367c7a099f3fa4bb341b89721d79bfd252fc62135e8a73fb991214756a86fb8a818491205f160212adecd0830efa5dab816a66ffb427e0bfe66303ad778681e2260c6f9c4e29cb172d3116211c8dd"}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x3b4}, 0x1, 0x0, 0x0, 0x20040804}, 0x4008000) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x20, 0x10, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x1, 0x1}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@rand_addr, @empty, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x7, 0x1f, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x40, 0x1, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf8, 0x8c, 0x4de90882, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @private1, 0x7, 0x7, 0x492, 0x7f}}) sendmsg$nl_route(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@mpls_getroute={0x100, 0x1a, 0x800, 0x70bd28, 0x25dfdbfc, {0x1c, 0x20, 0x94, 0x8, 0xfc, 0x3, 0xff, 0x7, 0x1300}, [@RTA_DST={0x8, 0x1, {0xd08c, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x8, 0x7, r4}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x40, 0x8}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_MULTIPATH={0xc, 0x9, {0x571f, 0x20, 0x3b, r7}}, @RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x9}, {0x3}, {0xfff, 0x0, 0x1}, {0x3f}, {0x2}, {0x7}, {0x7, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0xffff8}, {0xc000, 0x0, 0x1}, {0x2}, {0x4, 0x0, 0x1}, {0x5a}, {0x6}, {0x2}, {0x3}, {}, {0xffff}, {0xaf5}, {0x692a}, {0x7}, {0x7fff, 0x0, 0x1}, {0x1000}, {0x401, 0x0, 0x1}, {0x36d, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x5ac}, {0x4, 0x0, 0x1}, {0xc452}]}, @RTA_VIA={0x14, 0x12, {0x10, "a4139e0706e549f2ed7ab2b950bd"}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x20, @empty}, 0x1c) 02:11:22 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:22 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_version\x00', 0x2, 0x0) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce382138f9e378f52e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799f092a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) (async) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x2000, 0x1}, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000100), 0x4) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x4, &(0x7f0000000100)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}], &(0x7f00000001c0)='GPL\x00', 0x665, 0x0, 0x0, 0x41000, 0x10, '\x00', 0x0, 0x25, r0, 0x8, &(0x7f0000000200)={0x9, 0x3}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x6, 0x3135, 0x1}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000300)=[r0, r0, r0, r0, r0, r0, 0xffffffffffffffff, r0]}, 0x80) splice(r3, &(0x7f00000000c0), r4, &(0x7f00000003c0)=0x7a27, 0xfffffffffffffffb, 0x9) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x11}, 0x1c) 02:11:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x10, 0x0, @dev, 0x6}, 0x1c) 02:11:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x18, 0x990, 0x913, 0x1, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48) ioctl$FIOCLEX(r0, 0x5451) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x7, 0xd, 0x1, 0x0, 'R9y'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x201, 0x0, 0x0, {0xf}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x2}]}}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x1b0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x63, 0xc, "6c75f79c5d2be0bb74f9feb12946ff5d426be617a416e4ac77533b13d2b1268346e6c6f46ec82c4dad95baaf51607e499c0fa963e1a56ab19362f37bc16fd4cf0cab436ba5ece30a71cc8b82e1bbce9530fd57d9b8c9c1b9ed5106b34051bd"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "642b32f81cf086fcc0d2f407060f3c482dbcd753cecfe3b086963fe767317f9055e6772c208a364691c4119f0b582bb43cb82f98e4898b991aff03b0021bb9b73d4c6909df8f3f1578d9a8f62e160f5e38fb6b883dda9fc0ba2bb99f9cac3bf9ad76ee022bbf159f9737aa09a92245daafefa7388e7e9a5cd694667435c5753c97c75464cde5486c7d3b5faa691bea19167bff15ac9746a713b6804ec72269b1cc628f92c61784d4e93b64"}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0x5d, 0xc, "4e5a91ba0a9005f2ac6b2367c7a099f3fa4bb341b89721d79bfd252fc62135e8a73fb991214756a86fb8a818491205f160212adecd0830efa5dab816a66ffb427e0bfe66303ad778681e2260c6f9c4e29cb172d3116211c8dd"}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x3b4}, 0x1, 0x0, 0x0, 0x20040804}, 0x4008000) (async) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x20, 0x10, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x1, 0x1}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@rand_addr, @empty, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x7, 0x1f, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x40, 0x1, 0x40}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf8, 0x8c, 0x4de90882, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @private1, 0x7, 0x7, 0x492, 0x7f}}) sendmsg$nl_route(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@mpls_getroute={0x100, 0x1a, 0x800, 0x70bd28, 0x25dfdbfc, {0x1c, 0x20, 0x94, 0x8, 0xfc, 0x3, 0xff, 0x7, 0x1300}, [@RTA_DST={0x8, 0x1, {0xd08c, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x8, 0x7, r4}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x40, 0x8}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_MULTIPATH={0xc, 0x9, {0x571f, 0x20, 0x3b, r7}}, @RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x9}, {0x3}, {0xfff, 0x0, 0x1}, {0x3f}, {0x2}, {0x7}, {0x7, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0xffff8}, {0xc000, 0x0, 0x1}, {0x2}, {0x4, 0x0, 0x1}, {0x5a}, {0x6}, {0x2}, {0x3}, {}, {0xffff}, {0xaf5}, {0x692a}, {0x7}, {0x7fff, 0x0, 0x1}, {0x1000}, {0x401, 0x0, 0x1}, {0x36d, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x5ac}, {0x4, 0x0, 0x1}, {0xc452}]}, @RTA_VIA={0x14, 0x12, {0x10, "a4139e0706e549f2ed7ab2b950bd"}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x20, @empty}, 0x1c) 02:11:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x3d0a) 02:11:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x18, 0x990, 0x913, 0x1, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48) ioctl$FIOCLEX(r0, 0x5451) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x7, 0xd, 0x1, 0x0, 'R9y'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x201, 0x0, 0x0, {0xf}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x2}]}}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x1b0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x63, 0xc, "6c75f79c5d2be0bb74f9feb12946ff5d426be617a416e4ac77533b13d2b1268346e6c6f46ec82c4dad95baaf51607e499c0fa963e1a56ab19362f37bc16fd4cf0cab436ba5ece30a71cc8b82e1bbce9530fd57d9b8c9c1b9ed5106b34051bd"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "642b32f81cf086fcc0d2f407060f3c482dbcd753cecfe3b086963fe767317f9055e6772c208a364691c4119f0b582bb43cb82f98e4898b991aff03b0021bb9b73d4c6909df8f3f1578d9a8f62e160f5e38fb6b883dda9fc0ba2bb99f9cac3bf9ad76ee022bbf159f9737aa09a92245daafefa7388e7e9a5cd694667435c5753c97c75464cde5486c7d3b5faa691bea19167bff15ac9746a713b6804ec72269b1cc628f92c61784d4e93b64"}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0x5d, 0xc, "4e5a91ba0a9005f2ac6b2367c7a099f3fa4bb341b89721d79bfd252fc62135e8a73fb991214756a86fb8a818491205f160212adecd0830efa5dab816a66ffb427e0bfe66303ad778681e2260c6f9c4e29cb172d3116211c8dd"}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x3b4}, 0x1, 0x0, 0x0, 0x20040804}, 0x4008000) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r3 = socket$netlink(0x10, 0x3, 0xe) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x20, 0x10, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x1, 0x1}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@rand_addr, @empty, 0x0}, &(0x7f00000002c0)=0xc) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x7, 0x1f, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x40, 0x1, 0x40}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf8, 0x8c, 0x4de90882, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @private1, 0x7, 0x7, 0x492, 0x7f}}) sendmsg$nl_route(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@mpls_getroute={0x100, 0x1a, 0x800, 0x70bd28, 0x25dfdbfc, {0x1c, 0x20, 0x94, 0x8, 0xfc, 0x3, 0xff, 0x7, 0x1300}, [@RTA_DST={0x8, 0x1, {0xd08c, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x8, 0x7, r4}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x40, 0x8}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_MULTIPATH={0xc, 0x9, {0x571f, 0x20, 0x3b, r7}}, @RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x9}, {0x3}, {0xfff, 0x0, 0x1}, {0x3f}, {0x2}, {0x7}, {0x7, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0xffff8}, {0xc000, 0x0, 0x1}, {0x2}, {0x4, 0x0, 0x1}, {0x5a}, {0x6}, {0x2}, {0x3}, {}, {0xffff}, {0xaf5}, {0x692a}, {0x7}, {0x7fff, 0x0, 0x1}, {0x1000}, {0x401, 0x0, 0x1}, {0x36d, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x5ac}, {0x4, 0x0, 0x1}, {0xc452}]}, @RTA_VIA={0x14, 0x12, {0x10, "a4139e0706e549f2ed7ab2b950bd"}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x20, @empty}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x18, 0x990, 0x913, 0x1, 0x1, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x2}, 0x48) (async) ioctl$FIOCLEX(r0, 0x5451) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000ac0)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000a80)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_DELOBJ={0x4c, 0x14, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_SET_USERDATA={0x7, 0xd, 0x1, 0x0, 'R9y'}]}, @NFT_MSG_DELTABLE={0x4c, 0x2, 0xa, 0x201, 0x0, 0x0, {0xf}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x14, 0x8, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_NEWOBJ={0x28, 0x12, 0xa, 0x201, 0x0, 0x0, {}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0x14, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x2}]}}, @NFT_MSG_DELFLOWTABLE={0x4c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x7}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x54, 0x0, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x1b0, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x63, 0xc, "6c75f79c5d2be0bb74f9feb12946ff5d426be617a416e4ac77533b13d2b1268346e6c6f46ec82c4dad95baaf51607e499c0fa963e1a56ab19362f37bc16fd4cf0cab436ba5ece30a71cc8b82e1bbce9530fd57d9b8c9c1b9ed5106b34051bd"}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_USERDATA={0xaf, 0xc, "642b32f81cf086fcc0d2f407060f3c482dbcd753cecfe3b086963fe767317f9055e6772c208a364691c4119f0b582bb43cb82f98e4898b991aff03b0021bb9b73d4c6909df8f3f1578d9a8f62e160f5e38fb6b883dda9fc0ba2bb99f9cac3bf9ad76ee022bbf159f9737aa09a92245daafefa7388e7e9a5cd694667435c5753c97c75464cde5486c7d3b5faa691bea19167bff15ac9746a713b6804ec72269b1cc628f92c61784d4e93b64"}, @NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_POLICY={0x8}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x6}, @NFTA_CHAIN_USERDATA={0x5d, 0xc, "4e5a91ba0a9005f2ac6b2367c7a099f3fa4bb341b89721d79bfd252fc62135e8a73fb991214756a86fb8a818491205f160212adecd0830efa5dab816a66ffb427e0bfe66303ad778681e2260c6f9c4e29cb172d3116211c8dd"}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x1c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x1}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffc}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}]}], {0x14}}, 0x3b4}, 0x1, 0x0, 0x0, 0x20040804}, 0x4008000) (async) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) getsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, &(0x7f0000000600), &(0x7f0000000640)=0x4) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) (async) socket$netlink(0x10, 0x3, 0xe) (async) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000200)={'syztnl2\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0x8, 0x20, 0x10, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x40, 0x1, 0x1}}) (async) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000240)={@rand_addr, @empty}, &(0x7f00000002c0)=0xc) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', 0x0, 0x29, 0x80, 0x7, 0x1f, 0x8, @private0={0xfc, 0x0, '\x00', 0x1}, @local, 0x40, 0x1, 0x40}}) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6gre0\x00', 0x0, 0x2f, 0xf8, 0x8c, 0x4de90882, 0x28, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x31}}, @private1, 0x7, 0x7, 0x492, 0x7f}}) (async) sendmsg$nl_route(r3, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)=@mpls_getroute={0x100, 0x1a, 0x800, 0x70bd28, 0x25dfdbfc, {0x1c, 0x20, 0x94, 0x8, 0xfc, 0x3, 0xff, 0x7, 0x1300}, [@RTA_DST={0x8, 0x1, {0xd08c, 0x0, 0x1}}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x3}, @RTA_MULTIPATH={0xc, 0x9, {0x9, 0x8, 0x7, r4}}, @RTA_OIF={0x8, 0x4, r5}, @RTA_MULTIPATH={0xc, 0x9, {0x1, 0x40, 0x8}}, @RTA_OIF={0x8, 0x4, r6}, @RTA_TTL_PROPAGATE={0x5, 0x1a, 0x1f}, @RTA_MULTIPATH={0xc, 0x9, {0x571f, 0x20, 0x3b, r7}}, @RTA_NEWDST={0x84, 0x13, [{0x5, 0x0, 0x1}, {0x9}, {0x3}, {0xfff, 0x0, 0x1}, {0x3f}, {0x2}, {0x7}, {0x7, 0x0, 0x1}, {0x3f, 0x0, 0x1}, {0xffff8}, {0xc000, 0x0, 0x1}, {0x2}, {0x4, 0x0, 0x1}, {0x5a}, {0x6}, {0x2}, {0x3}, {}, {0xffff}, {0xaf5}, {0x692a}, {0x7}, {0x7fff, 0x0, 0x1}, {0x1000}, {0x401, 0x0, 0x1}, {0x36d, 0x0, 0x1}, {0x7, 0x0, 0x1}, {0x8, 0x0, 0x1}, {0x3, 0x0, 0x1}, {0x5ac}, {0x4, 0x0, 0x1}, {0xc452}]}, @RTA_VIA={0x14, 0x12, {0x10, "a4139e0706e549f2ed7ab2b950bd"}}]}, 0x100}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004) (async) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x8}}, './file0\x00'}) (async) connect$inet6(r8, &(0x7f0000000100)={0xa, 0x4e24, 0x20, @empty}, 0x1c) (async) 02:11:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x4}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:23 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x11, 0x0, @dev, 0x6}, 0x1c) 02:11:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x8008) 02:11:23 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x4}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x4}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:23 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044040}, 0x20048001) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 02:11:23 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1f00) 02:11:23 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x4}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044040}, 0x20048001) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044040}, 0x20048001) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) (async) 02:11:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x20}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, 0x2, 0x6, 0x401, 0x0, 0x0, {0x5, 0x0, 0x2}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20044040}, 0x20048001) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, 0x3, 0x6, 0x201, 0x0, 0x0, {0xc, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 02:11:24 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x10, 0x0, @dev, 0x6}, 0x1c) 02:11:24 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) (async) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x20}, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xa005) 02:11:24 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x48, 0x0, @dev, 0x6}, 0x1c) 02:11:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:24 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r2, 0x0, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r2) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x20, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x7f}}, './file0\x00'}) (async) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) (async) bind$netlink(r1, &(0x7f0000000000)={0x10, 0x0, 0x3, 0x20}, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xff00) 02:11:25 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x36}, 0xd}, 0x1c) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xbb8, 0x1, 0x5, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x5}, 0x2, 0x0, 0x3, 0x6, 0x20, 'syz1\x00', "14a3e5b420443df85a38df338197859707614b9903447830cf44d95cb0e8e50c", "0bf8abcf6258173ccc939d812b93db1e0bc9ad880c36d0687b40166485b1b4ad", [{0xff2, 0xff80, {0x2, 0xdf70}}, {0x5cd, 0x7, {0x1, 0x1}}, {0x4, 0x8, {0x0, 0x7fff}}, {0x0, 0xad6, {0x1, 0x101}}, {0x1f, 0x7, {0x1, 0x81}}, {0x7, 0x40, {0x3, 0x100}}, {0xf2, 0x6, {0x3, 0x4000000}}, {0x536, 0x73a, {0x0, 0xfffffffe}}, {0x9, 0x74, {0x2, 0x7fff}}, {0x0, 0x1ff, {0x1, 0xff}}, {0x1d, 0x9, {0x0, 0x3}}, {0x1, 0x20d0, {0x1, 0x6}}, {0x7, 0x8, {0x1, 0x80000000}}, {0xbe5, 0x5, {0x1}}, {0x0, 0x6, {0x3}}, {0x7fff, 0x20, {0x0, 0x9}}, {0xfff, 0x2, {0x0, 0xffffffff}}, {0x5, 0x8242, {0x3, 0x5}}, {0x800, 0x7212, {0x2, 0xc3}}, {0x400, 0x4, {0x3, 0x80000001}}, {0x200, 0x68a4, {0x3, 0x6}}, {0x8000, 0x7f, {0x1}}, {0xf79d, 0x5, {0x3, 0x6}}, {0x9c40, 0x401, {0x2, 0xfffffff8}}, {0x7, 0x0, {0x3, 0x5}}, {0xf057, 0x81, {0x3, 0x1}}, {0x8000, 0x0, {0x0, 0x1}}, {0xc4c, 0x4f, {0x3, 0x2768d53f}}, {0xfffd, 0x81, {0x3, 0xb4f}}, {0x2, 0xf553, {0x2, 0xd29}}, {0x6, 0x0, {0x3, 0x2}}, {0x3, 0x80, {0x3, 0x1}}, {0x0, 0x0, {0x0, 0x1}}, {0x504, 0x34, {0x2, 0x9}}, {0x5, 0x4, {0x2, 0x401}}, {0xfc01, 0x6, {0x3, 0x4}}, {0x9, 0xf5bc, {0x0, 0x80000000}}, {0x200, 0x20, {0x1, 0x400}}, {0x3, 0x101, {0x3, 0x100}}, {0x0, 0xfc01, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x3, 0x0, 0xffff, 0x6, 0x0, 'syz0\x00', "03914b72f7bed4bf013faf73bb9b402a5146c948edf42efde879fb74446f57de", "c675889f3152ff9d21b38ea9a737d45427e54974d3636c18a5fc89857ca0591f", [{0x1, 0x8, {0x2, 0x6}}, {0x1ff, 0x3, {0x3, 0x2}}, {0x4f2, 0x9, {0x0, 0x8}}, {0x3, 0x0, {0x3, 0x1}}, {0x2, 0x7, {0x0, 0x2}}, {0x6, 0x1f, {0x3, 0x5}}, {0x6, 0x7fff, {0x3}}, {0x2, 0xfffe, {0x2, 0x4}}, {0x0, 0x2, {0x3, 0x5e}}, {0x7, 0x3a5f, {0x1, 0x8000}}, {0x8, 0x100, {0x2, 0x8001}}, {0x25bd, 0xff, {0x1, 0x4}}, {0xfff8, 0xfff8, {0x0, 0x7}}, {0xfffb, 0x800, {0x0, 0x4}}, {0x4, 0x873c, {0x0, 0x7}}, {0x8, 0x8, {0x3, 0x10000}}, {0x1ff, 0x1, {0x2, 0x8}}, {0x80, 0x0, {0x1, 0x1}}, {0x100, 0x4, {0x1, 0x5}}, {0x3f, 0x4, {0x1, 0x8}}, {0x8, 0x3, {0x1, 0x96}}, {0xf426, 0x8001, {0x2, 0x8}}, {0xfff, 0x9, {0x1, 0x5}}, {0x1, 0x6, {0x2, 0x6}}, {0x2, 0x80, {0x3}}, {0x3, 0x7ff, {0x1, 0x800}}, {0xb5c, 0x5c, {0x2, 0x6}}, {0x8, 0x3, {0x2, 0x3}}, {0x4, 0x3ff, {0x1, 0x3}}, {0x6, 0x1, {0x2, 0x3e}}, {0x5, 0x5, {0x3, 0x2}}, {0x0, 0x6, {0x0, 0x6}}, {0x6, 0xffe0, {0x3, 0x3}}, {0x5, 0x9, {0x3, 0x6}}, {0x101, 0x8, {0x2, 0x5}}, {0x81, 0x3f, {0x1, 0x10000}}, {0xd9, 0x4, {0x3, 0x7}}, {0x5918, 0x325, {0x1}}, {0x3ff, 0x800, {0x3, 0x3}}, {0x7, 0xfffd, {0x3, 0x8f44}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x20, 0x1, 0x3f, 0x5, 0x16, 'syz1\x00', "42cec02f6d1947c5192f0956328de3e83202293b80a491a61c82b41027fa49a2", "985aee8e1b451dbd6b493f7b26b145cc24d70dce6da8477918fa866eb23a8578", [{0x3f, 0x9, {0x2, 0x4f}}, {0x1cd0, 0xfff, {0x3, 0x1}}, {0x2, 0x19d, {0x0, 0x9}}, {0x8, 0xf0, {0x1, 0x4}}, {0x81, 0x9, {0x0, 0x1}}, {0xfff, 0x7, {0x3, 0x81}}, {0x0, 0x4, {0x0, 0x9}}, {0x1, 0x7, {0x2, 0x4}}, {0x8, 0x4, {0x3, 0x81}}, {0x979d, 0x100, {0x1, 0x9}}, {0x8000, 0xfffe, {0x1, 0x10000}}, {0x7, 0x3, {0x3, 0x7ff}}, {0x23, 0x3, {0x1, 0xffffffff}}, {0x101, 0x2, {0x1, 0x1f}}, {0x1, 0x1000, {0x3, 0x2}}, {0xeda, 0x54f5, {0x1, 0x2}}, {0x27e, 0x8, {0x0, 0xfffffffe}}, {0x988, 0x8f, {0x3, 0x7}}, {0xc5, 0x7ff, {0x3, 0x7}}, {0x9, 0x0, {0x1, 0x81}}, {0x0, 0x7, {0x1, 0xf07f}}, {0x0, 0x6, {0x2, 0xffffff04}}, {0x3, 0x7, {0x1, 0x2}}, {0x7, 0x1, {0x1, 0x9}}, {0x700, 0x1, {0x0, 0x7}}, {0x0, 0xfff9, {0x3, 0x401}}, {0x3, 0x9a, {0x1, 0x7}}, {0x7, 0xa57, {0x2, 0xffffffff}}, {0x8, 0x7fff, {0x0, 0x9}}, {0x200, 0xe4a4, {0x1, 0x5}}, {0x80, 0xee1, {0x7a38aada1aced3ae}}, {0x4, 0x1, {0x2, 0x8001}}, {0x7, 0x1ff, {0x1, 0x2}}, {0x589, 0x1, {0x1, 0x2b07dddc}}, {0x8000, 0x9, {0x1, 0xe2}}, {0x800, 0x400, {0x3, 0x10001}}, {0x3f, 0x0, {0x3, 0x6}}, {0xfffe, 0x1, {0x1, 0xfffffffe}}, {0x8000, 0x9, {0x1, 0x993c}}, {0xffff, 0x5, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x400}, 0x7, 0x5, 0x101, 0x7, 0x3, 'syz0\x00', "ce6325cf53f978cf749fbcbb6cf284f9cc89261479ef1281830a1324434723aa", "c5b642c05808a73d2d753dde4bfde7cb3f620e9b87534045e70daff734205926", [{0x6d, 0x2, {0x1, 0x60}}, {0x4, 0x3, {0x1, 0x4}}, {0x8, 0xd40, {0x2, 0x6}}, {0x89c3, 0x101, {0x2, 0x1}}, {0x9, 0x0, {0x0, 0x7ff}}, {0x400, 0x0, {0x3, 0x1}}, {0x9, 0x0, {0x3, 0x5}}, {0xef0, 0x1000, {0x0, 0x25}}, {0x0, 0x5, {0x2, 0x80000001}}, {0x20, 0x800, {0x1, 0x1}}, {0x8001, 0x5, {0x2, 0x9}}, {0x1, 0x0, {0x1, 0x6}}, {0x8001, 0x7, {0x0, 0x76ff}}, {0x5, 0x7, {0x0, 0x2}}, {0x6, 0x8, {0x0, 0x3}}, {0x1, 0xfff, {0x2, 0x80000000}}, {0x3, 0x80, {0x1, 0x6}}, {0x0, 0xb696, {0x2, 0x6}}, {0x3f, 0x3, {0x0, 0x4}}, {0x1, 0x6, {0x1, 0x58c000}}, {0x0, 0x3, {0x0, 0x5}}, {0xdb, 0xfbff, {0x0, 0x5}}, {0x9, 0x8001, {0x1, 0x59cf}}, {0x9, 0x3ff, {0x3, 0x101}}, {0xe311, 0x7ff, {0x3, 0x1}}, {0xfff, 0x1000, {0x2, 0x3f}}, {0x8, 0x3, {0x2, 0x1ff}}, {0xd9, 0x3ff, {0x2, 0x8}}, {0xff, 0x5968, {0x1, 0x7dad}}, {0x8a28, 0x8, {0x0, 0xe7ce}}, {0xca74, 0x7, {0x3, 0x7ff}}, {0x1ff, 0x3, {0x1, 0x10000}}, {0x40, 0xfe, {0x2, 0x4}}, {0x0, 0x6, {0x2, 0x8}}, {0x80, 0x6, {0x0, 0x7}}, {0x2, 0x9, {0x0, 0x89f7}}, {0x40, 0x49, {0x23572ac5d8bbfc0d, 0x6c35}}, {0x7, 0x7e0, {0x0, 0x8}}, {0xef, 0x1, {0x0, 0x2c}}, {0xe4, 0x3f, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0xa800}, 0x1, 0x8d, 0xe0, 0x7ff, 0x1, 'syz0\x00', "eabd8547b8dd1d79013eb6345d82a093201b08f8339afc4439e7545e22912516", "bd15d2e0cd24cac7b0d6533ef28d4734a706403a7a8134771f1dfac88a13caa3", [{0x1, 0x1, {0x3, 0x800}}, {0x200, 0x7fff, {0x2, 0x40}}, {0x70, 0x1000, {0x3, 0x5}}, {0xf800, 0x4, {0x3, 0x6}}, {0x8, 0x2, {0x3, 0x800}}, {0xfff, 0xb5, {0x3, 0x1000}}, {0x4, 0x8, {0x1, 0x5}}, {0x8000, 0x7fff, {0x0, 0x1}}, {0x8001, 0xad7, {0x0, 0xffff}}, {0x2e, 0x4, {0x3, 0xfffffff6}}, {0x3f, 0x2b, {0x1, 0x2}}, {0x81, 0x3ec, {0x2, 0x3}}, {0x5, 0x7, {0x2, 0x3}}, {0x9, 0x4, {0x3, 0x7}}, {0x158b, 0x1800, {0x1, 0x6}}, {0x7, 0xa6, {0x0, 0x80000000}}, {0x1, 0x7, {0x1, 0x100}}, {0x1000, 0x6, {0x2}}, {0x81, 0x9, {0x1, 0x3}}, {0xffff, 0x3, {0x0, 0x6}}, {0x2, 0x8, {0x1, 0x6}}, {0x3157, 0x9, {0x1, 0xf81}}, {0x1, 0x8, {0x2, 0x7ff}}, {0x9b6, 0x4c, {0x0, 0x1}}, {0x800, 0x200, {0x0, 0x7c33326e}}, {0x1, 0xc9, {0x3, 0xf3}}, {0x5, 0x3, {0x1}}, {0x3f, 0x35, {0x2, 0x5}}, {0x0, 0x1, {0x2, 0xffff0001}}, {0x2, 0x4, {0x2, 0x9}}, {0x1000, 0xffff, {0x3, 0x8c}}, {0x7, 0xf4, {0x1, 0x1000}}, {0x6, 0x5, {0x3, 0x7}}, {0x2, 0xffff, {0x1, 0x5}}, {0x400, 0xff, {0x0, 0x7}}, {0x4, 0x6, {0x0, 0x400}}, {0x8d70, 0x800, {0x2, 0x800}}, {0x2, 0x81, {0x0, 0xfff}}, {0x7, 0x3, {0x3, 0x2}}, {0x7fff, 0x8, {0x1}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x23, 0x4, 0x1ff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x100000, @empty, 0x1}, 0x1c) 02:11:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xa005) 02:11:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xff01) 02:11:25 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="a80000003600000429bd7000ffdbdf255b41cca98649431c8a27dc7ac632d0da5541b6c1f3a44713e600683831383112916e2130c01ddede6bafd22bd5fa2dfdcd0d2a14678304a7c1566f24515010df927afa660a1e98811418f280f7d4cf88fd0aef995783d862529314959fdc5e21e791b1f0db9394a339aa16734e3fdb5f3f541867809938046ce7dfd1ef1f304b58a666afd5a0b9400e4ba4663a0000"], 0xa8}, {&(0x7f0000000880)=ANY=[@ANYBLOB="b80200002500200026bd7000fbdbdf25cf00000004001200a780c8d26b915dde008172e63d5da4b85c8fb74ad7dc03f7177a768d708c8aa1aafd163f89", @ANYRES32, @ANYBLOB="83663d29864720d8d688d04e38bf9bf89906d4738b93c6b3d6cbac7af64028c2c16f1b8c04024afa05816b780acc048de48c96135ddc2fdb7a0064305fa3bb9730b8d0e49179a11a7f7795bb3d12215a4990a3e8845850fc33a196ec578508f0e05b006e1f25127b04acb446d39e1bcb99272be73f5d6316c1901ccc69be94ba98ad3305955f4a169e6b2e0a5acef39028fa8577e1f3ecf914071b8b0f8b5d5083b7485f26e843432d174e90097134bc9cd6c14988f4899440dd36", @ANYRES32=r4, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB='\x00'], 0x2b8}, {&(0x7f0000002980)={0x1a58, 0xfffc, 0x10, 0x70bd2d, 0x9, "", [@nested={0x734, 0x8d, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='m\x00'}, @generic="5300000000000000dc38187c413c269267b39fbec7f5a9a39561d02e13f247eda9", @generic="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", @typed={0x8, 0x11, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}, @typed={0x59, 0xa, 0x0, 0x0, @binary="1eed0cff7021dda86f22eec86000c14bbf15c35fcfd8bc985277d08fa3d184619bd49017470ee8683f456108cc23369d42683d4cda66c120ec17a4c891b063c430a6966a4e6749adb96000b72d30fd8c9b1352d701"}, @nested={0x1269, 0x69, 0x0, 0x1, [@generic="7a98328fc76bc2081a855c1ba7ac29fb7cb24b5bddcce385b826eeb2585343bedacc9b5b6a6d2d24dfae2ff28e0acda64eb9f8044f7e5e07ac59d5f68641bb1bc0b6e1ed7cf497b4be8eab913fefb81cf7e9804e653a49389b9cb5a32b4cbf35beca0d66c79e721ea89d843030311e2c42b9adebc32c00a64bf5e48379c2fd36afdf568e4cd7568e66990345074c7a0f166e0a37", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @typed={0xe1, 0xe, 0x0, 0x0, @binary="275285bb3c75a33e4793d85b94ab5451d10d0380f81c94e842cc0c3976c09d8aa194cd31c23fdbda498c7112fbd679240bb2f1881c081690673422036de8a4a7a6c4bd0dd8b0b1071195b9a252396f920e3b9442e769c37512374f038e3b1746048be044dc4f46a9ae1049c5f44e78776064c72739a3acbd9071a4968a49a6158cbcb1ee241f466a3a0f2d80df006bf284a30768d0acaf9ba380549e80e3067629f5446595d135e10a91e00e3f0730a5e8510feef74b44671e297cd1465b11482902103a9e80c196192e9d32c8a9fa5c51d4066f0d277c1de359856421"}, @typed={0x4, 0x50}, @generic="42390bc3d11f2db69976470a9d8e2b55a039331117a0f1cdff5a6d2df791342933f78055afefba25c88be5b4b9db5a1963def4f43fbd0b805575963c8a255188bab1391452b86194c4f0c6bdccbfdb29a669389c8d", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x6}, @generic, @generic="d2c471c02397625544b5213653ff0d12d8dfb459013096d458fa5493ab019bb8f6021de69d652e5865e1cf1d6c50d35643dd8e867e33daa3c64102bcf9b6f2dda489ff975cc83b010bbdb520976a4f11de019657291e755f93a1dfb1f3960003d08b383c4a256eb864801115", @generic="80fa0f1d58e1d815819c05c08011bd19d0cf9348ba29405098b875d68824317dbc03d3e1e740a74e284d19c158357db85c21f7bf3ff02afc643ab78977317342e2af7d514fc58d66082081163939519ee3cf1cb15ff31c328ee03cacd4810d35e31567acd7595e9710a8fcfbec4a1ca3cfe152efc8fc1ed29b3abc8f0836d7cadd770c42e5fd4e7e943aa157e98bba17c2b00c4d3354c9f0b67e14c354f96da8fe1581d5bb8618e6dacca519e95e8ca2b9cf685058ef8c793de9e4b60582cf21e12330114a667c659a4aea84d6853cfc82f2e65ee324ff16e11aef3747228e8728beaf1ae0a59ccf6ba6f30ec50e8eb69478fd2b13296f7a86a7bca4f0ec9217c299e9b9d66f13ce6914b65418849d86e49dde69a2bc0228b4d2c95fbbcd3fcfc951069911f8bc11a93e99cb18c130f54edb308a7a5e88b2ebb6786f6192688ed0fc12c4bf995d57f4f56ee0bc6fb2c8f2d16aa219daab4120e37a9b79172e46dda0da9d07d58a59bdb432c46686bb21879c77fc70c81f1b63cf8425a15683b8304c24b933158c7b62d32c32c6d57548ff9aee763aa0b21d2e9d705bb06bdaa1f1a803c7f4a5451f8bce85640d4a01a8c61d7bc8387c1c9cd724c8661a8417dd8e7575610141e71f8f08350db61eae3f1c8e4e8c0d8f8c24f8b6a03358848577f699d6379998c33727198fa5c8a0d9fb59ed306f3e7808f11420c82a62c51ba08e732c572c43c044d281fc5050f2874b0dc4b7cf573b9d6c344be4d4c16957f4c9c22c65e8d597a6eef6d4865971c01c7352509ef6d933be1d67f4b962831141d4507288b498d4e8458d962a62f8926c5e5c354f0fe40716bc740784711cd732c301eec383f2f02cdd25a4fbac3631ff1571e995c648252311338abae9980377255b7d5f3d171648697c90dc5b1e0fe0d9270c63a95d11f0b51a5ca3643a1857f87cec3e3cc707ba3eb0b4aa950209bd700e5963ba11d7d400c87b5ae51a80e4be2ec9522296132c45d41fb5b13627e6bee0643d5d1f1483594b973e448de98bb728d0348a5c0e215e9a0e8abe139b482803e60a8b628879b53bdce39e3648d710dbc2ebf5565ee2beb93ab189ee68d56ff7c48447b8bdfd2eb63801d22014696e3ed60236d3a138b61fd0ba5afd65dae6b0200f8ae7ec79c1de2e1ca8e7f8e9db226c314492a99f651076bac8f039a5b9d27b85b123135b9001328716f410550648150bbe22b3712a72c920080ea3bbd0a26b917f861aa5fea7855fc8eb05fa501c0bfa8e8359ce62abfea37c198e515356e5f8bdc6c901ffe1ebf26fc3ade0ddececcbfc07b405e524fb191316030a29631e0619e708279eb84b2dc2c348e75e4bab6138456a9589338de2e0a03c0880362a3a1a42b276fbcafac10b35ef5833e29a9852ea9b7656867d5e13b9d6e826a69f0ad53c7a3dbfcef5bff699b48df02ccadaafd18213483ba0ea2ea0df0ff58ca3fa6812f3360786205436a0cbf64be558c5c62ed74c0663c4ee20806031f7bdcbe491c3f79aef5752283edf755c73bde7baa74e1e13925083f7bc82e252d60b92aba94c84bec02d3bd87fe390c819e62aa7c97168e5dc8c5282799d401e19bd186d475c8fe7bc0f468a8960026d7efc075466162d099cd32edfd08908794da1ba01d4c1417736566460268e5a62a1c5de999191ae0f8f960c4eeb02300c3c123bfcaf041d7079eda96c36ea49c60c1826a2f80a14e64d42b4f864f4c35d5947e072a95e687cc813ee767ae4186263fe956852318b1bf38ca755e01b15c8803f4643f663da5191b329e2992c11cf6413e4dbd1dcf6b8ed73788bc20056259b498f85eb87a583dcc3958505af859e3dbfdec6907b3e380a263bd28b5d878ad7b022b6e5dab230989da1087c090c1759c7f155409fe45534fde1113bda279d5f5ac7731c2fc8d44f6e33222d055af32d98f78802082e4378fadfc4c7e7b900bfdd6b715f866f969b148d24a28e06ae5defbf4f40e99446068cc9a187ee3be91d9e0c923c528feee8caf0d7c7c972e39cbad2fe947e60a687ac112c51603414351c4b90bda4ec3e11c11d2243fb573655521efa1f627648e3430db17bd9a6196877a9a62913af128ed2a17ce46aee137964426ef5032dca27c7b76a8f08356bb849f6532e1c328afddf7f16188dfbf3b56d0a434baa69c0758dcd3df89c363b328319fec3da03947139a13a4f0be8b47047aac8ca561c2eb669a6762642b706d468faf90943f23a0304e847077ab6ba6d714874a0805108b616fcb5c152f133bef9d1c691badda3242abdd8aaf06717c9293576449e43100fef5962c30c144f7fd1935f9af53e35ca994f156593de04e518a331a037d375f95f02aea502bffd6b28d451123883849d59b50880fd4aafa60458b3e05a65213e6bc1ad59aa1b49ee2f657c4a183d21d4c3859110e2284dfa5fc415022589c8cb634497bf831a71f46ebf6656ae4a33572acd96127d46241670cc0fbc561c4ce6bdb17106ece43cb433651730377a63218c28ddf9e96bd73197e387e4dc2bc221092d6a18489a3705f169ba48681be3ad1ef903274263425359261108d7c150d72532062e126941fb51b9542633d3e542a4df205a3fa41b046ad04c2a945ee5c7aa59c9621d4336f9b3b53ed87ad1e2bce0f896e1d3215646a2d5a3a38873ca169cb57fd80015036159af21feea2220d4a4755e1148ab520f5e9824dad92e495c056bda73ec1db5b508cf880c52676b139b687eb7b21a19c55d7e14f1f68eb7827f6af1e2a79aaa0a6d7875e3a82eb590728eeeb2b39d48e2e5b76784785bb51bb3884d79c9e2e82b66d0249c72bb25dd5988e725c6317761b3bd004febf451bf20cb55844e6763c3220208624c450516d794783a78d080f68631fa9591dd021033b8793d2dfea0f47d28a02bd11b3d843e2b7065707fef8924eb881cbeb0ff26bad074ddcd5ccbbafcff4f25b8ea4f2378a216701d25e2a53dbfaf5753fdfbacf90f6e2990aa5c65fbbdfe695d1f5cc546c072575d10f9a304f600e9423a4770891df132170e54da5fa0987ea61de404b7d7048ac0b5864a0c2179771a19d8897a1b9ba0c94e80ba0958a167cc14314e454d735429a68a27fd7c6f095d5b1e82105129d1a9e5d81297240fcfce99b2e13f5715e24abe64d43fe4bd1427b83da4e9d451fbc6031d1a7544525cc3ae254e6ac9ede057cec801ce98705b70e7b585df072deae4c49da03505d038d26f91aa75294c52cffd0d681cd6e263c86e8370d784ee2356c2bfaf5b037c12d2b2b1c595c4c85b667bf9ffb8922ac6b59ae6a0c8d5ebf37fe1735d488a423667f1072af351e3f223f2723c860cbca64104d10dd5eaa8035459d9160b54f0e6d2b61f87d4d709589567dcf44883a1db95204065f2b0d9bbf19516ea0cbe3f680525e866698d4533955a61ae0071a96f3ff7f40936bd0616f301b0d7046047ad4b005b7d689b75da45e553ea8b568336c6b2dbdba80eb0919860a03edc3c55eada4017ff7aa632fdf3002c7be73bc7984299b04f97bf2f16f84d20bd8360e2a836478de21948e699a718137cb2991f2c8b0d0b2bb9453dd9fe0d83d1d057a4c3c2dbfb51ed5ebfe004fd89fa1e49f6c7c78af21015670cf3ed7a077be191b98a917dfff5ffc636a2c09fa5a467c288f56e88ce654ee23d923e4ea65fd0dd2f9c82db773f28affab125f742271b48da2d2ab8b128f649d5325a87b5953e8e6f08eb471aa8a24e2521d4d550604805ea81c4d4c6523f4d143656355c591ce9af73f6d2a47f916316493be01e3ad695dbfd19054ca237de6a128f61145ead509661598f1b6cab4d2e243bd6a7ee97b3b89aab46ac558dd7c50585a14a4ea78ac0e1552277229c1a660ea19103a435dc26972522b0a11c6bd84a0b48da8c1c80b96eb5269d68279b49f0cb7e982cdefdd8fdc10ed008fdb5e9b0e827d21dd55301ec41bc5b51792d9a67808834814e3f60011ee15d0ba2173068c5dd10211f2e18c561796c32682b4956b2514e47609fa6e143cf21e9ca51c2fca6deb91be9ba1f4ca394d6382f3bc39561074f75f741389f84386057475699df76c297772ceb81ac9dbc632752429ba52f68f0d26b21f137766eb8f22c90717be39385ab64c418bd33769a5c1608a97ab1503515ec46b0640edd736c547c56952aae3d67c518cb42ef212f40f31bd18e05029e9b6b69f6d8652a9cf0575351837e15edb243879a8a51cacd802c96305a6d619692d14965550196886ad275d657a3b87b106274452bbd0d891a2e619f6ea56cf6dafdc5f0f866a930d4262eb23df27c559c8d26aa23fd1c8c39a373902e953b115e735889c79f1d98035f29be32c720c711bda32a3b4235e0d8b2d5142368f159f85ce7c65a5e11c903f1984141a4d20fd1a74347dc28d1b23b31b1ea6915b95b6bb409e7aa59afc0907e6c15c1a3e4d81fcc9b04fb7b80894db606369eddffbdb5c123b2483790cd798e5e36881f37e4d16424ab83b57564b7b86233321a8838ed6eecb9864502dbe83f549be7c958af05f21be3323f861d9b1c4f2e7b8d6dd558b09f46f6fba1492689c94d2b15bb97dc2ada72e21f80d33e3e7d742559ce7636b82d085e5e181c0dce41cc878fc9bbb27c81bc5c28a51619cde9be1138c2f352a53e725f3109b0c0f998742fd0b9cba32b942749888116db215452ed14996aec5045c05569aa721910687815d0df8ab8e83439dfea173f341ec53760c4cbc4fceee43a4f5ef3d7fd448b1f1f6c427d767915557b81fb79f09f3b880dbf3dffedcf804108ebf9d9b0f01a61d390e8d630bfb6f62867b50039be18d3954ad866265f2d9d22dcd98b2b65e66efc7ced21dce3dae813c2a4c235a4d7b5e8d96e7f44700a05ef53d65e2f087b5fd910d4a322a88e385d1a1c3a0b2402eafcee19cda7462abb686ba0dd64f1b62ea43e24e50244324ce4b25fc89b68246f7d93068d02fd1c12e951d772ffcfb0f958b9de7adafbd0eb3cd4f974331577bc7ed7c5dea8f92ce5cb399b126b96247ee9c07529b86b708161806149a4dcca277a316e55360d226c8c7424716d2f73d8d003014bad73eacf1220372b9eaf40c2e67766725b024d8a3a76728112a9f51dda1940db2770330ff75de70e055ee3f9c48c621d7b3c690ebc24b1cfa01e51787a8915da8c147aa33f2577327d238049f70ea2464a88487d9545ffb960627c4b9bb611e924c98969e058bcb13e00790ad7edd5e67dc3a93546258ba8b3cde6195abbe93f2688b7e62ec0061190e0f3e574926b3f582b8f39920ddbadb9783ac48de1c6399a434b2536e8f4ee946b28550ca4fbd9a625f67a84747fd956fa9ead8fb577d7f127a99fc75fb58f2b6202e213e1f1cce8c6b556313eb0e1b488b05e86d687cad1c4dd5f255157372fbac59f0b5695ceda58b1677c02ca87d26d29f63d35c94b7f1180048c0c4863b0eba499319f793703db7c492e2a3c44f9e07cc752af3318eedcbfaab2e08c8c4ffb6807559c0c928065e39241010da7079ed312ca7e5706490f63b3963d3b8df1f5713f8c13f3012ad1d4d00de9979143e59c9619d7985b2e7ec22867ac8433d8269add0f667b0dd70804d9c7d42fb9f5c92099761a6b4c5f931925b6429f7c47ee55f3d997bad60fa6cac0d1279ab602ab42c6765c699bfe0f21b7a0480d146bd14cd00e6547ed99c8e16d02107420537bda24d1f9c5d7bd810d0a3d2836b57e2eaf8787fd34bc48fc2d98f39ebee497a6c1dcf3e885137477ff13714e79bc06b672ad4d9fa42e"]}, @generic="2fbc29e5e96ade303b98130ca49619dccb66f0f7dda78a43c2cc499b236955637f473361e4fd520f195333d4c7b91e279f7059709cfb9f178edb121bc28ae34ef3f722737a51"]}, 0x1a58}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="800200002a0004f0008035ae11d9f6baf6235ecae3f9a568ebc244144b2a1b471ce65e320fab164a4bd8c5a2ce97ed6228c55e51f1b6cc744b104b622f84f1fcd4ae558bdd5198bb496f66453fac943e7933474d12cf61a2801ba25f803a28d9750d380618aa5798", @ANYRESHEX=r3, @ANYBLOB="14006100fe8000000000000000000000000000aabfb4c327513af50ed90ae2bd0a87280a99b62160ff076c4b5c1dde67b06f0554d6c81ae2ce88adf3ded4cc5063b5ee5a2c38304f2d8e64e1c1e1608e44e6819f245be2705582c379b58eccf0cc19f69d96a4accb176f08e8f9fb003c817776a6ff834481cfd602f4834445301897fdc39df0467e16818df72a6e66fbf1af54a88603088e9ee412ba6f60d23a2751c6b20bd9549ea6e87da0260ffda06f51c9e75a851abbdd7f2e7d8c03b861313d6e7bad195bd39febfba6955b7d4de20827a24d3b6df77fd0c458914ea4f72559de3433ad23a37dae153b23c251c8f45687af8872c349055d2468a2d78a2cd5998a006f80a75d9aa01daf586347dd291d1fadc802830d84539f936f08fc6f1f609461fdfee1bcc6637cf25ecf112d880e15bd4cfb32409838d11c26bbdd2c667d9246d5981102e1c208619e59fd4356e9d3eceb8d647ddf81f7eb7b371385f503340dd8f4e370f09c18bf5957f37cda9efd76180d116d73d132e670f46482d3da9411c52c4d012e2673bb000040009380d6b58c6d96ce4617d9d85821a1fd464c010fc0b483f3b0b2f907510292d8fb26ed61bb50da2e60660580108966d601710652ca23c6a3df073e01750c040086002f8986f08a516b1137e0645750791afb9c46728b0f0a6bb71dc27554f45b1e3545ae0af7ae089c52f1b6e3f5adadc145724013431915fc54524646daceefc3fdc56c7bb752c1785e4f0efb10f93744ac7df6b19de27fb2b9eb13c11baa5394a60a0ad02489f00c979c64d7c7dfb4efa6b1fb48f5dabb993a2fc7380bf2ec73dba3f3c22eb267014f1a82430800380000000000000000b02429a8999cbe0ae5b161ac7b4352f2d1cc2b3793"], 0x280}], 0x4, &(0x7f0000000480), 0x0, 0x8001}, 0x800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 02:11:25 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:25 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (rerun: 64) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async, rerun: 32) getsockname$packet(r2, 0x0, &(0x7f0000000240)) (async, rerun: 32) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r2) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x20, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8480}, 0x0) (async, rerun: 32) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) (async, rerun: 32) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:25 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4c, 0x0, @dev, 0x6}, 0x1c) 02:11:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x80080) 02:11:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) getsockname$packet(r2, 0x0, &(0x7f0000000240)) r3 = syz_genetlink_get_family_id$smc(&(0x7f0000000340), r2) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x20, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8480}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) dup(r1) (async) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) (async) getsockname$packet(r2, 0x0, &(0x7f0000000240)) (async) syz_genetlink_get_family_id$smc(&(0x7f0000000340), r2) (async) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, r3, 0x20, 0x0, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_virt_wifi\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBPORT={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x8480}, 0x0) (async) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r3, 0x100, 0x70bd2b, 0x25dfdbfb, {}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6tnl0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x400c000}, 0x4) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x36}, 0xd}, 0x1c) (async) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xbb8, 0x1, 0x5, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x5}, 0x2, 0x0, 0x3, 0x6, 0x20, 'syz1\x00', "14a3e5b420443df85a38df338197859707614b9903447830cf44d95cb0e8e50c", "0bf8abcf6258173ccc939d812b93db1e0bc9ad880c36d0687b40166485b1b4ad", [{0xff2, 0xff80, {0x2, 0xdf70}}, {0x5cd, 0x7, {0x1, 0x1}}, {0x4, 0x8, {0x0, 0x7fff}}, {0x0, 0xad6, {0x1, 0x101}}, {0x1f, 0x7, {0x1, 0x81}}, {0x7, 0x40, {0x3, 0x100}}, {0xf2, 0x6, {0x3, 0x4000000}}, {0x536, 0x73a, {0x0, 0xfffffffe}}, {0x9, 0x74, {0x2, 0x7fff}}, {0x0, 0x1ff, {0x1, 0xff}}, {0x1d, 0x9, {0x0, 0x3}}, {0x1, 0x20d0, {0x1, 0x6}}, {0x7, 0x8, {0x1, 0x80000000}}, {0xbe5, 0x5, {0x1}}, {0x0, 0x6, {0x3}}, {0x7fff, 0x20, {0x0, 0x9}}, {0xfff, 0x2, {0x0, 0xffffffff}}, {0x5, 0x8242, {0x3, 0x5}}, {0x800, 0x7212, {0x2, 0xc3}}, {0x400, 0x4, {0x3, 0x80000001}}, {0x200, 0x68a4, {0x3, 0x6}}, {0x8000, 0x7f, {0x1}}, {0xf79d, 0x5, {0x3, 0x6}}, {0x9c40, 0x401, {0x2, 0xfffffff8}}, {0x7, 0x0, {0x3, 0x5}}, {0xf057, 0x81, {0x3, 0x1}}, {0x8000, 0x0, {0x0, 0x1}}, {0xc4c, 0x4f, {0x3, 0x2768d53f}}, {0xfffd, 0x81, {0x3, 0xb4f}}, {0x2, 0xf553, {0x2, 0xd29}}, {0x6, 0x0, {0x3, 0x2}}, {0x3, 0x80, {0x3, 0x1}}, {0x0, 0x0, {0x0, 0x1}}, {0x504, 0x34, {0x2, 0x9}}, {0x5, 0x4, {0x2, 0x401}}, {0xfc01, 0x6, {0x3, 0x4}}, {0x9, 0xf5bc, {0x0, 0x80000000}}, {0x200, 0x20, {0x1, 0x400}}, {0x3, 0x101, {0x3, 0x100}}, {0x0, 0xfc01, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x3, 0x0, 0xffff, 0x6, 0x0, 'syz0\x00', "03914b72f7bed4bf013faf73bb9b402a5146c948edf42efde879fb74446f57de", "c675889f3152ff9d21b38ea9a737d45427e54974d3636c18a5fc89857ca0591f", [{0x1, 0x8, {0x2, 0x6}}, {0x1ff, 0x3, {0x3, 0x2}}, {0x4f2, 0x9, {0x0, 0x8}}, {0x3, 0x0, {0x3, 0x1}}, {0x2, 0x7, {0x0, 0x2}}, {0x6, 0x1f, {0x3, 0x5}}, {0x6, 0x7fff, {0x3}}, {0x2, 0xfffe, {0x2, 0x4}}, {0x0, 0x2, {0x3, 0x5e}}, {0x7, 0x3a5f, {0x1, 0x8000}}, {0x8, 0x100, {0x2, 0x8001}}, {0x25bd, 0xff, {0x1, 0x4}}, {0xfff8, 0xfff8, {0x0, 0x7}}, {0xfffb, 0x800, {0x0, 0x4}}, {0x4, 0x873c, {0x0, 0x7}}, {0x8, 0x8, {0x3, 0x10000}}, {0x1ff, 0x1, {0x2, 0x8}}, {0x80, 0x0, {0x1, 0x1}}, {0x100, 0x4, {0x1, 0x5}}, {0x3f, 0x4, {0x1, 0x8}}, {0x8, 0x3, {0x1, 0x96}}, {0xf426, 0x8001, {0x2, 0x8}}, {0xfff, 0x9, {0x1, 0x5}}, {0x1, 0x6, {0x2, 0x6}}, {0x2, 0x80, {0x3}}, {0x3, 0x7ff, {0x1, 0x800}}, {0xb5c, 0x5c, {0x2, 0x6}}, {0x8, 0x3, {0x2, 0x3}}, {0x4, 0x3ff, {0x1, 0x3}}, {0x6, 0x1, {0x2, 0x3e}}, {0x5, 0x5, {0x3, 0x2}}, {0x0, 0x6, {0x0, 0x6}}, {0x6, 0xffe0, {0x3, 0x3}}, {0x5, 0x9, {0x3, 0x6}}, {0x101, 0x8, {0x2, 0x5}}, {0x81, 0x3f, {0x1, 0x10000}}, {0xd9, 0x4, {0x3, 0x7}}, {0x5918, 0x325, {0x1}}, {0x3ff, 0x800, {0x3, 0x3}}, {0x7, 0xfffd, {0x3, 0x8f44}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x20, 0x1, 0x3f, 0x5, 0x16, 'syz1\x00', "42cec02f6d1947c5192f0956328de3e83202293b80a491a61c82b41027fa49a2", "985aee8e1b451dbd6b493f7b26b145cc24d70dce6da8477918fa866eb23a8578", [{0x3f, 0x9, {0x2, 0x4f}}, {0x1cd0, 0xfff, {0x3, 0x1}}, {0x2, 0x19d, {0x0, 0x9}}, {0x8, 0xf0, {0x1, 0x4}}, {0x81, 0x9, {0x0, 0x1}}, {0xfff, 0x7, {0x3, 0x81}}, {0x0, 0x4, {0x0, 0x9}}, {0x1, 0x7, {0x2, 0x4}}, {0x8, 0x4, {0x3, 0x81}}, {0x979d, 0x100, {0x1, 0x9}}, {0x8000, 0xfffe, {0x1, 0x10000}}, {0x7, 0x3, {0x3, 0x7ff}}, {0x23, 0x3, {0x1, 0xffffffff}}, {0x101, 0x2, {0x1, 0x1f}}, {0x1, 0x1000, {0x3, 0x2}}, {0xeda, 0x54f5, {0x1, 0x2}}, {0x27e, 0x8, {0x0, 0xfffffffe}}, {0x988, 0x8f, {0x3, 0x7}}, {0xc5, 0x7ff, {0x3, 0x7}}, {0x9, 0x0, {0x1, 0x81}}, {0x0, 0x7, {0x1, 0xf07f}}, {0x0, 0x6, {0x2, 0xffffff04}}, {0x3, 0x7, {0x1, 0x2}}, {0x7, 0x1, {0x1, 0x9}}, {0x700, 0x1, {0x0, 0x7}}, {0x0, 0xfff9, {0x3, 0x401}}, {0x3, 0x9a, {0x1, 0x7}}, {0x7, 0xa57, {0x2, 0xffffffff}}, {0x8, 0x7fff, {0x0, 0x9}}, {0x200, 0xe4a4, {0x1, 0x5}}, {0x80, 0xee1, {0x7a38aada1aced3ae}}, {0x4, 0x1, {0x2, 0x8001}}, {0x7, 0x1ff, {0x1, 0x2}}, {0x589, 0x1, {0x1, 0x2b07dddc}}, {0x8000, 0x9, {0x1, 0xe2}}, {0x800, 0x400, {0x3, 0x10001}}, {0x3f, 0x0, {0x3, 0x6}}, {0xfffe, 0x1, {0x1, 0xfffffffe}}, {0x8000, 0x9, {0x1, 0x993c}}, {0xffff, 0x5, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x400}, 0x7, 0x5, 0x101, 0x7, 0x3, 'syz0\x00', "ce6325cf53f978cf749fbcbb6cf284f9cc89261479ef1281830a1324434723aa", "c5b642c05808a73d2d753dde4bfde7cb3f620e9b87534045e70daff734205926", [{0x6d, 0x2, {0x1, 0x60}}, {0x4, 0x3, {0x1, 0x4}}, {0x8, 0xd40, {0x2, 0x6}}, {0x89c3, 0x101, {0x2, 0x1}}, {0x9, 0x0, {0x0, 0x7ff}}, {0x400, 0x0, {0x3, 0x1}}, {0x9, 0x0, {0x3, 0x5}}, {0xef0, 0x1000, {0x0, 0x25}}, {0x0, 0x5, {0x2, 0x80000001}}, {0x20, 0x800, {0x1, 0x1}}, {0x8001, 0x5, {0x2, 0x9}}, {0x1, 0x0, {0x1, 0x6}}, {0x8001, 0x7, {0x0, 0x76ff}}, {0x5, 0x7, {0x0, 0x2}}, {0x6, 0x8, {0x0, 0x3}}, {0x1, 0xfff, {0x2, 0x80000000}}, {0x3, 0x80, {0x1, 0x6}}, {0x0, 0xb696, {0x2, 0x6}}, {0x3f, 0x3, {0x0, 0x4}}, {0x1, 0x6, {0x1, 0x58c000}}, {0x0, 0x3, {0x0, 0x5}}, {0xdb, 0xfbff, {0x0, 0x5}}, {0x9, 0x8001, {0x1, 0x59cf}}, {0x9, 0x3ff, {0x3, 0x101}}, {0xe311, 0x7ff, {0x3, 0x1}}, {0xfff, 0x1000, {0x2, 0x3f}}, {0x8, 0x3, {0x2, 0x1ff}}, {0xd9, 0x3ff, {0x2, 0x8}}, {0xff, 0x5968, {0x1, 0x7dad}}, {0x8a28, 0x8, {0x0, 0xe7ce}}, {0xca74, 0x7, {0x3, 0x7ff}}, {0x1ff, 0x3, {0x1, 0x10000}}, {0x40, 0xfe, {0x2, 0x4}}, {0x0, 0x6, {0x2, 0x8}}, {0x80, 0x6, {0x0, 0x7}}, {0x2, 0x9, {0x0, 0x89f7}}, {0x40, 0x49, {0x23572ac5d8bbfc0d, 0x6c35}}, {0x7, 0x7e0, {0x0, 0x8}}, {0xef, 0x1, {0x0, 0x2c}}, {0xe4, 0x3f, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0xa800}, 0x1, 0x8d, 0xe0, 0x7ff, 0x1, 'syz0\x00', "eabd8547b8dd1d79013eb6345d82a093201b08f8339afc4439e7545e22912516", "bd15d2e0cd24cac7b0d6533ef28d4734a706403a7a8134771f1dfac88a13caa3", [{0x1, 0x1, {0x3, 0x800}}, {0x200, 0x7fff, {0x2, 0x40}}, {0x70, 0x1000, {0x3, 0x5}}, {0xf800, 0x4, {0x3, 0x6}}, {0x8, 0x2, {0x3, 0x800}}, {0xfff, 0xb5, {0x3, 0x1000}}, {0x4, 0x8, {0x1, 0x5}}, {0x8000, 0x7fff, {0x0, 0x1}}, {0x8001, 0xad7, {0x0, 0xffff}}, {0x2e, 0x4, {0x3, 0xfffffff6}}, {0x3f, 0x2b, {0x1, 0x2}}, {0x81, 0x3ec, {0x2, 0x3}}, {0x5, 0x7, {0x2, 0x3}}, {0x9, 0x4, {0x3, 0x7}}, {0x158b, 0x1800, {0x1, 0x6}}, {0x7, 0xa6, {0x0, 0x80000000}}, {0x1, 0x7, {0x1, 0x100}}, {0x1000, 0x6, {0x2}}, {0x81, 0x9, {0x1, 0x3}}, {0xffff, 0x3, {0x0, 0x6}}, {0x2, 0x8, {0x1, 0x6}}, {0x3157, 0x9, {0x1, 0xf81}}, {0x1, 0x8, {0x2, 0x7ff}}, {0x9b6, 0x4c, {0x0, 0x1}}, {0x800, 0x200, {0x0, 0x7c33326e}}, {0x1, 0xc9, {0x3, 0xf3}}, {0x5, 0x3, {0x1}}, {0x3f, 0x35, {0x2, 0x5}}, {0x0, 0x1, {0x2, 0xffff0001}}, {0x2, 0x4, {0x2, 0x9}}, {0x1000, 0xffff, {0x3, 0x8c}}, {0x7, 0xf4, {0x1, 0x1000}}, {0x6, 0x5, {0x3, 0x7}}, {0x2, 0xffff, {0x1, 0x5}}, {0x400, 0xff, {0x0, 0x7}}, {0x4, 0x6, {0x0, 0x400}}, {0x8d70, 0x800, {0x2, 0x800}}, {0x2, 0x81, {0x0, 0xfff}}, {0x7, 0x3, {0x3, 0x2}}, {0x7fff, 0x8, {0x1}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) (async) r2 = socket(0x23, 0x4, 0x1ff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x100000, @empty, 0x1}, 0x1c) 02:11:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000014}, 0x8004) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xfffff) [ 562.599220][ T1231] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.599271][ T1231] ieee802154 phy1 wpan1: encryption failed: -22 02:11:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:11:26 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x54, 0x0, @dev, 0x6}, 0x1c) 02:11:26 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="a80000003600000429bd7000ffdbdf255b41cca98649431c8a27dc7ac632d0da5541b6c1f3a44713e600683831383112916e2130c01ddede6bafd22bd5fa2dfdcd0d2a14678304a7c1566f24515010df927afa660a1e98811418f280f7d4cf88fd0aef995783d862529314959fdc5e21e791b1f0db9394a339aa16734e3fdb5f3f541867809938046ce7dfd1ef1f304b58a666afd5a0b9400e4ba4663a0000"], 0xa8}, {&(0x7f0000000880)=ANY=[@ANYBLOB="b80200002500200026bd7000fbdbdf25cf00000004001200a780c8d26b915dde008172e63d5da4b85c8fb74ad7dc03f7177a768d708c8aa1aafd163f89", @ANYRES32, @ANYBLOB="83663d29864720d8d688d04e38bf9bf89906d4738b93c6b3d6cbac7af64028c2c16f1b8c04024afa05816b780acc048de48c96135ddc2fdb7a0064305fa3bb9730b8d0e49179a11a7f7795bb3d12215a4990a3e8845850fc33a196ec578508f0e05b006e1f25127b04acb446d39e1bcb99272be73f5d6316c1901ccc69be94ba98ad3305955f4a169e6b2e0a5acef39028fa8577e1f3ecf914071b8b0f8b5d5083b7485f26e843432d174e90097134bc9cd6c14988f4899440dd36", @ANYRES32=r4, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB='\x00'], 0x2b8}, {&(0x7f0000002980)={0x1a58, 0xfffc, 0x10, 0x70bd2d, 0x9, "", [@nested={0x734, 0x8d, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='m\x00'}, @generic="5300000000000000dc38187c413c269267b39fbec7f5a9a39561d02e13f247eda9", @generic="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", @typed={0x8, 0x11, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}, @typed={0x59, 0xa, 0x0, 0x0, @binary="1eed0cff7021dda86f22eec86000c14bbf15c35fcfd8bc985277d08fa3d184619bd49017470ee8683f456108cc23369d42683d4cda66c120ec17a4c891b063c430a6966a4e6749adb96000b72d30fd8c9b1352d701"}, @nested={0x1269, 0x69, 0x0, 0x1, [@generic="7a98328fc76bc2081a855c1ba7ac29fb7cb24b5bddcce385b826eeb2585343bedacc9b5b6a6d2d24dfae2ff28e0acda64eb9f8044f7e5e07ac59d5f68641bb1bc0b6e1ed7cf497b4be8eab913fefb81cf7e9804e653a49389b9cb5a32b4cbf35beca0d66c79e721ea89d843030311e2c42b9adebc32c00a64bf5e48379c2fd36afdf568e4cd7568e66990345074c7a0f166e0a37", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @typed={0xe1, 0xe, 0x0, 0x0, @binary="275285bb3c75a33e4793d85b94ab5451d10d0380f81c94e842cc0c3976c09d8aa194cd31c23fdbda498c7112fbd679240bb2f1881c081690673422036de8a4a7a6c4bd0dd8b0b1071195b9a252396f920e3b9442e769c37512374f038e3b1746048be044dc4f46a9ae1049c5f44e78776064c72739a3acbd9071a4968a49a6158cbcb1ee241f466a3a0f2d80df006bf284a30768d0acaf9ba380549e80e3067629f5446595d135e10a91e00e3f0730a5e8510feef74b44671e297cd1465b11482902103a9e80c196192e9d32c8a9fa5c51d4066f0d277c1de359856421"}, @typed={0x4, 0x50}, @generic="42390bc3d11f2db69976470a9d8e2b55a039331117a0f1cdff5a6d2df791342933f78055afefba25c88be5b4b9db5a1963def4f43fbd0b805575963c8a255188bab1391452b86194c4f0c6bdccbfdb29a669389c8d", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x6}, @generic, @generic="d2c471c02397625544b5213653ff0d12d8dfb459013096d458fa5493ab019bb8f6021de69d652e5865e1cf1d6c50d35643dd8e867e33daa3c64102bcf9b6f2dda489ff975cc83b010bbdb520976a4f11de019657291e755f93a1dfb1f3960003d08b383c4a256eb864801115", @generic="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"]}, @generic="2fbc29e5e96ade303b98130ca49619dccb66f0f7dda78a43c2cc499b236955637f473361e4fd520f195333d4c7b91e279f7059709cfb9f178edb121bc28ae34ef3f722737a51"]}, 0x1a58}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="800200002a0004f0008035ae11d9f6baf6235ecae3f9a568ebc244144b2a1b471ce65e320fab164a4bd8c5a2ce97ed6228c55e51f1b6cc744b104b622f84f1fcd4ae558bdd5198bb496f66453fac943e7933474d12cf61a2801ba25f803a28d9750d380618aa5798", @ANYRESHEX=r3, @ANYBLOB="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"], 0x280}], 0x4, &(0x7f0000000480), 0x0, 0x8001}, 0x800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 02:11:26 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000014}, 0x8004) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:11:26 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x20000000, @dev={0xfe, 0x80, '\x00', 0x36}, 0xd}, 0x1c) (async) sendmsg$OSF_MSG_REMOVE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f00000002c0)={0xbb8, 0x1, 0x5, 0x0, 0x0, 0x0, {0x2, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x5}, 0x2, 0x0, 0x3, 0x6, 0x20, 'syz1\x00', "14a3e5b420443df85a38df338197859707614b9903447830cf44d95cb0e8e50c", "0bf8abcf6258173ccc939d812b93db1e0bc9ad880c36d0687b40166485b1b4ad", [{0xff2, 0xff80, {0x2, 0xdf70}}, {0x5cd, 0x7, {0x1, 0x1}}, {0x4, 0x8, {0x0, 0x7fff}}, {0x0, 0xad6, {0x1, 0x101}}, {0x1f, 0x7, {0x1, 0x81}}, {0x7, 0x40, {0x3, 0x100}}, {0xf2, 0x6, {0x3, 0x4000000}}, {0x536, 0x73a, {0x0, 0xfffffffe}}, {0x9, 0x74, {0x2, 0x7fff}}, {0x0, 0x1ff, {0x1, 0xff}}, {0x1d, 0x9, {0x0, 0x3}}, {0x1, 0x20d0, {0x1, 0x6}}, {0x7, 0x8, {0x1, 0x80000000}}, {0xbe5, 0x5, {0x1}}, {0x0, 0x6, {0x3}}, {0x7fff, 0x20, {0x0, 0x9}}, {0xfff, 0x2, {0x0, 0xffffffff}}, {0x5, 0x8242, {0x3, 0x5}}, {0x800, 0x7212, {0x2, 0xc3}}, {0x400, 0x4, {0x3, 0x80000001}}, {0x200, 0x68a4, {0x3, 0x6}}, {0x8000, 0x7f, {0x1}}, {0xf79d, 0x5, {0x3, 0x6}}, {0x9c40, 0x401, {0x2, 0xfffffff8}}, {0x7, 0x0, {0x3, 0x5}}, {0xf057, 0x81, {0x3, 0x1}}, {0x8000, 0x0, {0x0, 0x1}}, {0xc4c, 0x4f, {0x3, 0x2768d53f}}, {0xfffd, 0x81, {0x3, 0xb4f}}, {0x2, 0xf553, {0x2, 0xd29}}, {0x6, 0x0, {0x3, 0x2}}, {0x3, 0x80, {0x3, 0x1}}, {0x0, 0x0, {0x0, 0x1}}, {0x504, 0x34, {0x2, 0x9}}, {0x5, 0x4, {0x2, 0x401}}, {0xfc01, 0x6, {0x3, 0x4}}, {0x9, 0xf5bc, {0x0, 0x80000000}}, {0x200, 0x20, {0x1, 0x400}}, {0x3, 0x101, {0x3, 0x100}}, {0x0, 0xfc01, {0x0, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x8}, 0x3, 0x0, 0xffff, 0x6, 0x0, 'syz0\x00', "03914b72f7bed4bf013faf73bb9b402a5146c948edf42efde879fb74446f57de", "c675889f3152ff9d21b38ea9a737d45427e54974d3636c18a5fc89857ca0591f", [{0x1, 0x8, {0x2, 0x6}}, {0x1ff, 0x3, {0x3, 0x2}}, {0x4f2, 0x9, {0x0, 0x8}}, {0x3, 0x0, {0x3, 0x1}}, {0x2, 0x7, {0x0, 0x2}}, {0x6, 0x1f, {0x3, 0x5}}, {0x6, 0x7fff, {0x3}}, {0x2, 0xfffe, {0x2, 0x4}}, {0x0, 0x2, {0x3, 0x5e}}, {0x7, 0x3a5f, {0x1, 0x8000}}, {0x8, 0x100, {0x2, 0x8001}}, {0x25bd, 0xff, {0x1, 0x4}}, {0xfff8, 0xfff8, {0x0, 0x7}}, {0xfffb, 0x800, {0x0, 0x4}}, {0x4, 0x873c, {0x0, 0x7}}, {0x8, 0x8, {0x3, 0x10000}}, {0x1ff, 0x1, {0x2, 0x8}}, {0x80, 0x0, {0x1, 0x1}}, {0x100, 0x4, {0x1, 0x5}}, {0x3f, 0x4, {0x1, 0x8}}, {0x8, 0x3, {0x1, 0x96}}, {0xf426, 0x8001, {0x2, 0x8}}, {0xfff, 0x9, {0x1, 0x5}}, {0x1, 0x6, {0x2, 0x6}}, {0x2, 0x80, {0x3}}, {0x3, 0x7ff, {0x1, 0x800}}, {0xb5c, 0x5c, {0x2, 0x6}}, {0x8, 0x3, {0x2, 0x3}}, {0x4, 0x3ff, {0x1, 0x3}}, {0x6, 0x1, {0x2, 0x3e}}, {0x5, 0x5, {0x3, 0x2}}, {0x0, 0x6, {0x0, 0x6}}, {0x6, 0xffe0, {0x3, 0x3}}, {0x5, 0x9, {0x3, 0x6}}, {0x101, 0x8, {0x2, 0x5}}, {0x81, 0x3f, {0x1, 0x10000}}, {0xd9, 0x4, {0x3, 0x7}}, {0x5918, 0x325, {0x1}}, {0x3ff, 0x800, {0x3, 0x3}}, {0x7, 0xfffd, {0x3, 0x8f44}}]}}}, {{0x254, 0x1, {{0x0, 0x7}, 0x20, 0x1, 0x3f, 0x5, 0x16, 'syz1\x00', "42cec02f6d1947c5192f0956328de3e83202293b80a491a61c82b41027fa49a2", "985aee8e1b451dbd6b493f7b26b145cc24d70dce6da8477918fa866eb23a8578", [{0x3f, 0x9, {0x2, 0x4f}}, {0x1cd0, 0xfff, {0x3, 0x1}}, {0x2, 0x19d, {0x0, 0x9}}, {0x8, 0xf0, {0x1, 0x4}}, {0x81, 0x9, {0x0, 0x1}}, {0xfff, 0x7, {0x3, 0x81}}, {0x0, 0x4, {0x0, 0x9}}, {0x1, 0x7, {0x2, 0x4}}, {0x8, 0x4, {0x3, 0x81}}, {0x979d, 0x100, {0x1, 0x9}}, {0x8000, 0xfffe, {0x1, 0x10000}}, {0x7, 0x3, {0x3, 0x7ff}}, {0x23, 0x3, {0x1, 0xffffffff}}, {0x101, 0x2, {0x1, 0x1f}}, {0x1, 0x1000, {0x3, 0x2}}, {0xeda, 0x54f5, {0x1, 0x2}}, {0x27e, 0x8, {0x0, 0xfffffffe}}, {0x988, 0x8f, {0x3, 0x7}}, {0xc5, 0x7ff, {0x3, 0x7}}, {0x9, 0x0, {0x1, 0x81}}, {0x0, 0x7, {0x1, 0xf07f}}, {0x0, 0x6, {0x2, 0xffffff04}}, {0x3, 0x7, {0x1, 0x2}}, {0x7, 0x1, {0x1, 0x9}}, {0x700, 0x1, {0x0, 0x7}}, {0x0, 0xfff9, {0x3, 0x401}}, {0x3, 0x9a, {0x1, 0x7}}, {0x7, 0xa57, {0x2, 0xffffffff}}, {0x8, 0x7fff, {0x0, 0x9}}, {0x200, 0xe4a4, {0x1, 0x5}}, {0x80, 0xee1, {0x7a38aada1aced3ae}}, {0x4, 0x1, {0x2, 0x8001}}, {0x7, 0x1ff, {0x1, 0x2}}, {0x589, 0x1, {0x1, 0x2b07dddc}}, {0x8000, 0x9, {0x1, 0xe2}}, {0x800, 0x400, {0x3, 0x10001}}, {0x3f, 0x0, {0x3, 0x6}}, {0xfffe, 0x1, {0x1, 0xfffffffe}}, {0x8000, 0x9, {0x1, 0x993c}}, {0xffff, 0x5, {0x3, 0x4}}]}}}, {{0x254, 0x1, {{0x1, 0x400}, 0x7, 0x5, 0x101, 0x7, 0x3, 'syz0\x00', "ce6325cf53f978cf749fbcbb6cf284f9cc89261479ef1281830a1324434723aa", "c5b642c05808a73d2d753dde4bfde7cb3f620e9b87534045e70daff734205926", [{0x6d, 0x2, {0x1, 0x60}}, {0x4, 0x3, {0x1, 0x4}}, {0x8, 0xd40, {0x2, 0x6}}, {0x89c3, 0x101, {0x2, 0x1}}, {0x9, 0x0, {0x0, 0x7ff}}, {0x400, 0x0, {0x3, 0x1}}, {0x9, 0x0, {0x3, 0x5}}, {0xef0, 0x1000, {0x0, 0x25}}, {0x0, 0x5, {0x2, 0x80000001}}, {0x20, 0x800, {0x1, 0x1}}, {0x8001, 0x5, {0x2, 0x9}}, {0x1, 0x0, {0x1, 0x6}}, {0x8001, 0x7, {0x0, 0x76ff}}, {0x5, 0x7, {0x0, 0x2}}, {0x6, 0x8, {0x0, 0x3}}, {0x1, 0xfff, {0x2, 0x80000000}}, {0x3, 0x80, {0x1, 0x6}}, {0x0, 0xb696, {0x2, 0x6}}, {0x3f, 0x3, {0x0, 0x4}}, {0x1, 0x6, {0x1, 0x58c000}}, {0x0, 0x3, {0x0, 0x5}}, {0xdb, 0xfbff, {0x0, 0x5}}, {0x9, 0x8001, {0x1, 0x59cf}}, {0x9, 0x3ff, {0x3, 0x101}}, {0xe311, 0x7ff, {0x3, 0x1}}, {0xfff, 0x1000, {0x2, 0x3f}}, {0x8, 0x3, {0x2, 0x1ff}}, {0xd9, 0x3ff, {0x2, 0x8}}, {0xff, 0x5968, {0x1, 0x7dad}}, {0x8a28, 0x8, {0x0, 0xe7ce}}, {0xca74, 0x7, {0x3, 0x7ff}}, {0x1ff, 0x3, {0x1, 0x10000}}, {0x40, 0xfe, {0x2, 0x4}}, {0x0, 0x6, {0x2, 0x8}}, {0x80, 0x6, {0x0, 0x7}}, {0x2, 0x9, {0x0, 0x89f7}}, {0x40, 0x49, {0x23572ac5d8bbfc0d, 0x6c35}}, {0x7, 0x7e0, {0x0, 0x8}}, {0xef, 0x1, {0x0, 0x2c}}, {0xe4, 0x3f, {0x2, 0x6}}]}}}, {{0x254, 0x1, {{0x1, 0xa800}, 0x1, 0x8d, 0xe0, 0x7ff, 0x1, 'syz0\x00', "eabd8547b8dd1d79013eb6345d82a093201b08f8339afc4439e7545e22912516", "bd15d2e0cd24cac7b0d6533ef28d4734a706403a7a8134771f1dfac88a13caa3", [{0x1, 0x1, {0x3, 0x800}}, {0x200, 0x7fff, {0x2, 0x40}}, {0x70, 0x1000, {0x3, 0x5}}, {0xf800, 0x4, {0x3, 0x6}}, {0x8, 0x2, {0x3, 0x800}}, {0xfff, 0xb5, {0x3, 0x1000}}, {0x4, 0x8, {0x1, 0x5}}, {0x8000, 0x7fff, {0x0, 0x1}}, {0x8001, 0xad7, {0x0, 0xffff}}, {0x2e, 0x4, {0x3, 0xfffffff6}}, {0x3f, 0x2b, {0x1, 0x2}}, {0x81, 0x3ec, {0x2, 0x3}}, {0x5, 0x7, {0x2, 0x3}}, {0x9, 0x4, {0x3, 0x7}}, {0x158b, 0x1800, {0x1, 0x6}}, {0x7, 0xa6, {0x0, 0x80000000}}, {0x1, 0x7, {0x1, 0x100}}, {0x1000, 0x6, {0x2}}, {0x81, 0x9, {0x1, 0x3}}, {0xffff, 0x3, {0x0, 0x6}}, {0x2, 0x8, {0x1, 0x6}}, {0x3157, 0x9, {0x1, 0xf81}}, {0x1, 0x8, {0x2, 0x7ff}}, {0x9b6, 0x4c, {0x0, 0x1}}, {0x800, 0x200, {0x0, 0x7c33326e}}, {0x1, 0xc9, {0x3, 0xf3}}, {0x5, 0x3, {0x1}}, {0x3f, 0x35, {0x2, 0x5}}, {0x0, 0x1, {0x2, 0xffff0001}}, {0x2, 0x4, {0x2, 0x9}}, {0x1000, 0xffff, {0x3, 0x8c}}, {0x7, 0xf4, {0x1, 0x1000}}, {0x6, 0x5, {0x3, 0x7}}, {0x2, 0xffff, {0x1, 0x5}}, {0x400, 0xff, {0x0, 0x7}}, {0x4, 0x6, {0x0, 0x400}}, {0x8d70, 0x800, {0x2, 0x800}}, {0x2, 0x81, {0x0, 0xfff}}, {0x7, 0x3, {0x3, 0x2}}, {0x7fff, 0x8, {0x1}}]}}}]}, 0xbb8}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) r2 = socket(0x23, 0x4, 0x1ff) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x100000, @empty, 0x1}, 0x1c) 02:11:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) (async) sendmsg$IPSET_CMD_PROTOCOL(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x1, 0x6, 0x401, 0x0, 0x0, {0xc, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000014}, 0x8004) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:27 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1}, 0x4}, {{&(0x7f0000000200)=@ax25={{0x3, @default}, [@rose, @bcast, @null, @bcast, @null, @netrom, @rose, @null]}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/98, 0x62}], 0x6, &(0x7f0000001640)}, 0x7}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/112, 0x70}, {&(0x7f00000017c0)=""/144, 0x90}, {&(0x7f0000001880)=""/5, 0x5}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/126, 0x7e}], 0x6, &(0x7f0000001a40)=""/118, 0x76}, 0xe4}], 0x3, 0x22, &(0x7f0000001b80)={0x77359400}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001c80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001580)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x20}, 0xd}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100), 0x4) dup(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001640)) 02:11:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x100000) 02:11:27 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 02:11:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x219298) 02:11:27 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x5c, 0x0, @dev, 0x6}, 0x1c) 02:11:27 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x54, 0x0, @dev, 0x6}, 0x1c) 02:11:27 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:28 executing program 4: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="a80000003600000429bd7000ffdbdf255b41cca98649431c8a27dc7ac632d0da5541b6c1f3a44713e600683831383112916e2130c01ddede6bafd22bd5fa2dfdcd0d2a14678304a7c1566f24515010df927afa660a1e98811418f280f7d4cf88fd0aef995783d862529314959fdc5e21e791b1f0db9394a339aa16734e3fdb5f3f541867809938046ce7dfd1ef1f304b58a666afd5a0b9400e4ba4663a0000"], 0xa8}, {&(0x7f0000000880)=ANY=[@ANYBLOB="b80200002500200026bd7000fbdbdf25cf00000004001200a780c8d26b915dde008172e63d5da4b85c8fb74ad7dc03f7177a768d708c8aa1aafd163f89", @ANYRES32, @ANYBLOB="83663d29864720d8d688d04e38bf9bf89906d4738b93c6b3d6cbac7af64028c2c16f1b8c04024afa05816b780acc048de48c96135ddc2fdb7a0064305fa3bb9730b8d0e49179a11a7f7795bb3d12215a4990a3e8845850fc33a196ec578508f0e05b006e1f25127b04acb446d39e1bcb99272be73f5d6316c1901ccc69be94ba98ad3305955f4a169e6b2e0a5acef39028fa8577e1f3ecf914071b8b0f8b5d5083b7485f26e843432d174e90097134bc9cd6c14988f4899440dd36", @ANYRES32=r4, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB='\x00'], 0x2b8}, {&(0x7f0000002980)={0x1a58, 0xfffc, 0x10, 0x70bd2d, 0x9, "", [@nested={0x734, 0x8d, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='m\x00'}, @generic="5300000000000000dc38187c413c269267b39fbec7f5a9a39561d02e13f247eda9", @generic="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", @typed={0x8, 0x11, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}, @typed={0x59, 0xa, 0x0, 0x0, @binary="1eed0cff7021dda86f22eec86000c14bbf15c35fcfd8bc985277d08fa3d184619bd49017470ee8683f456108cc23369d42683d4cda66c120ec17a4c891b063c430a6966a4e6749adb96000b72d30fd8c9b1352d701"}, @nested={0x1269, 0x69, 0x0, 0x1, [@generic="7a98328fc76bc2081a855c1ba7ac29fb7cb24b5bddcce385b826eeb2585343bedacc9b5b6a6d2d24dfae2ff28e0acda64eb9f8044f7e5e07ac59d5f68641bb1bc0b6e1ed7cf497b4be8eab913fefb81cf7e9804e653a49389b9cb5a32b4cbf35beca0d66c79e721ea89d843030311e2c42b9adebc32c00a64bf5e48379c2fd36afdf568e4cd7568e66990345074c7a0f166e0a37", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @typed={0xe1, 0xe, 0x0, 0x0, @binary="275285bb3c75a33e4793d85b94ab5451d10d0380f81c94e842cc0c3976c09d8aa194cd31c23fdbda498c7112fbd679240bb2f1881c081690673422036de8a4a7a6c4bd0dd8b0b1071195b9a252396f920e3b9442e769c37512374f038e3b1746048be044dc4f46a9ae1049c5f44e78776064c72739a3acbd9071a4968a49a6158cbcb1ee241f466a3a0f2d80df006bf284a30768d0acaf9ba380549e80e3067629f5446595d135e10a91e00e3f0730a5e8510feef74b44671e297cd1465b11482902103a9e80c196192e9d32c8a9fa5c51d4066f0d277c1de359856421"}, @typed={0x4, 0x50}, @generic="42390bc3d11f2db69976470a9d8e2b55a039331117a0f1cdff5a6d2df791342933f78055afefba25c88be5b4b9db5a1963def4f43fbd0b805575963c8a255188bab1391452b86194c4f0c6bdccbfdb29a669389c8d", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x6}, @generic, @generic="d2c471c02397625544b5213653ff0d12d8dfb459013096d458fa5493ab019bb8f6021de69d652e5865e1cf1d6c50d35643dd8e867e33daa3c64102bcf9b6f2dda489ff975cc83b010bbdb520976a4f11de019657291e755f93a1dfb1f3960003d08b383c4a256eb864801115", @generic="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"]}, @generic="2fbc29e5e96ade303b98130ca49619dccb66f0f7dda78a43c2cc499b236955637f473361e4fd520f195333d4c7b91e279f7059709cfb9f178edb121bc28ae34ef3f722737a51"]}, 0x1a58}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="800200002a0004f0008035ae11d9f6baf6235ecae3f9a568ebc244144b2a1b471ce65e320fab164a4bd8c5a2ce97ed6228c55e51f1b6cc744b104b622f84f1fcd4ae558bdd5198bb496f66453fac943e7933474d12cf61a2801ba25f803a28d9750d380618aa5798", @ANYRESHEX=r3, @ANYBLOB="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"], 0x280}], 0x4, &(0x7f0000000480), 0x0, 0x8001}, 0x800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 02:11:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x80ffff) 02:11:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1}, 0x4}, {{&(0x7f0000000200)=@ax25={{0x3, @default}, [@rose, @bcast, @null, @bcast, @null, @netrom, @rose, @null]}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/98, 0x62}], 0x6, &(0x7f0000001640)}, 0x7}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/112, 0x70}, {&(0x7f00000017c0)=""/144, 0x90}, {&(0x7f0000001880)=""/5, 0x5}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/126, 0x7e}], 0x6, &(0x7f0000001a40)=""/118, 0x76}, 0xe4}], 0x3, 0x22, &(0x7f0000001b80)={0x77359400}) (async) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001c80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001580)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x20}, 0xd}, 0x1c) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100), 0x4) (async) dup(r2) (async) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001640)) 02:11:28 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x60, 0x0, @dev, 0x6}, 0x1c) 02:11:28 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1}, 0x4}, {{&(0x7f0000000200)=@ax25={{0x3, @default}, [@rose, @bcast, @null, @bcast, @null, @netrom, @rose, @null]}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/98, 0x62}], 0x6, &(0x7f0000001640)}, 0x7}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/112, 0x70}, {&(0x7f00000017c0)=""/144, 0x90}, {&(0x7f0000001880)=""/5, 0x5}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/126, 0x7e}], 0x6, &(0x7f0000001a40)=""/118, 0x76}, 0xe4}], 0x3, 0x22, &(0x7f0000001b80)={0x77359400}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001c80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001580)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x20}, 0xd}, 0x1c) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100), 0x4) dup(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001640)) 02:11:28 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r0, &(0x7f0000001ac0)=[{{&(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000100)=""/210, 0xd2}], 0x1}, 0x4}, {{&(0x7f0000000200)=@ax25={{0x3, @default}, [@rose, @bcast, @null, @bcast, @null, @netrom, @rose, @null]}, 0x80, &(0x7f00000015c0)=[{&(0x7f00000002c0)=""/202, 0xca}, {&(0x7f00000003c0)=""/215, 0xd7}, {&(0x7f00000004c0)=""/56, 0x38}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/63, 0x3f}, {&(0x7f0000001bc0)=""/98, 0x62}], 0x6, &(0x7f0000001640)}, 0x7}, {{0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f0000001680)=""/153, 0x99}, {&(0x7f0000001740)=""/112, 0x70}, {&(0x7f00000017c0)=""/144, 0x90}, {&(0x7f0000001880)=""/5, 0x5}, {&(0x7f00000018c0)=""/90, 0x5a}, {&(0x7f0000001940)=""/126, 0x7e}], 0x6, &(0x7f0000001a40)=""/118, 0x76}, 0xe4}], 0x3, 0x22, &(0x7f0000001b80)={0x77359400}) sendmsg$IPCTNL_MSG_CT_GET_DYING(r0, &(0x7f0000001c80)={&(0x7f0000001540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001c40)={&(0x7f0000001580)={0x14, 0x6, 0x1, 0x201, 0x0, 0x0, {0x5, 0x0, 0x8}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000004) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x20}, 0xd}, 0x1c) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100), 0x4) (async) dup(r2) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000001640)) 02:11:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) fsetxattr$trusted_overlay_origin(r1, &(0x7f0000000000), &(0x7f0000000080), 0x2, 0x0) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:28 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x40001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "cf624e3656"}]}]}, @NL80211_ATTR_IE={0xa7, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0xab, 0x20, 0x3f}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random={0x8, 0x7c, "1bf92184579637d2392e1c1df6668963c2aaa9531eb660578ef77f129eef044617062bb6be172a34fb28bf78967b3e9c3e9490dea86f6f35b380130c11a4e28f01c3a2e5d2c1ab22adaf19239d3340e0616ccc1e1f74fccb24740f928fa8a0a8b3be679a40bce3137ffe55a21b0671ee7895549b6bd704c87ecac86d"}, @chsw_timing={0x68, 0x4, {0x20, 0x2}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1, 0x7f, 0x21}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0xd0f9, 0x1ff, 0x1, 0x9}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x810}, 0x20044081) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:28 executing program 3: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000080)={{0x1}, {0x2, 0x5}, 0x588f, 0x4}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:28 executing program 3: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000080)={{0x1}, {0x2, 0x5}, 0x588f, 0x4}) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x40001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "cf624e3656"}]}]}, @NL80211_ATTR_IE={0xa7, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0xab, 0x20, 0x3f}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random={0x8, 0x7c, "1bf92184579637d2392e1c1df6668963c2aaa9531eb660578ef77f129eef044617062bb6be172a34fb28bf78967b3e9c3e9490dea86f6f35b380130c11a4e28f01c3a2e5d2c1ab22adaf19239d3340e0616ccc1e1f74fccb24740f928fa8a0a8b3be679a40bce3137ffe55a21b0671ee7895549b6bd704c87ecac86d"}, @chsw_timing={0x68, 0x4, {0x20, 0x2}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1, 0x7f, 0x21}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0xd0f9, 0x1ff, 0x1, 0x9}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x810}, 0x20044081) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket(0x0, 0x3, 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x40001) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x30}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "cf624e3656"}]}]}, @NL80211_ATTR_IE={0xa7, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0xab, 0x20, 0x3f}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random={0x8, 0x7c, "1bf92184579637d2392e1c1df6668963c2aaa9531eb660578ef77f129eef044617062bb6be172a34fb28bf78967b3e9c3e9490dea86f6f35b380130c11a4e28f01c3a2e5d2c1ab22adaf19239d3340e0616ccc1e1f74fccb24740f928fa8a0a8b3be679a40bce3137ffe55a21b0671ee7895549b6bd704c87ecac86d"}, @chsw_timing={0x68, 0x4, {0x20, 0x2}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1, 0x7f, 0x21}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0xd0f9, 0x1ff, 0x1, 0x9}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x810}, 0x20044081) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$nl_crypto(0x10, 0x3, 0x15) (async) bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x80ffff) 02:11:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x1000000) 02:11:29 executing program 3: ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000080)={{0x1}, {0x2, 0x5}, 0x588f, 0x4}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000000)=0x2, 0x4) (async, rerun: 32) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (rerun: 32) 02:11:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) (async) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x40001) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "cf624e3656"}]}]}, @NL80211_ATTR_IE={0xa7, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0xab, 0x20, 0x3f}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random={0x8, 0x7c, "1bf92184579637d2392e1c1df6668963c2aaa9531eb660578ef77f129eef044617062bb6be172a34fb28bf78967b3e9c3e9490dea86f6f35b380130c11a4e28f01c3a2e5d2c1ab22adaf19239d3340e0616ccc1e1f74fccb24740f928fa8a0a8b3be679a40bce3137ffe55a21b0671ee7895549b6bd704c87ecac86d"}, @chsw_timing={0x68, 0x4, {0x20, 0x2}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1, 0x7f, 0x21}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0xd0f9, 0x1ff, 0x1, 0x9}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x810}, 0x20044081) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r6 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:29 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x68, 0x0, @dev, 0x6}, 0x1c) 02:11:29 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x80ffff) 02:11:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200481, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x8, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x42810) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) 02:11:29 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d61}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x86, 0x6, "5a733d5420483ffac79a0f0c77a16af31ff39ecdf268d7708aafe2ddbddd7b7b3d3b4fea5b070f2eedf5dee90afec1864dbc50b57f37c636b8fbc851f0ee7e6bc0700ec7b3022168def65d3082c262092bc50a00ccd80abc0fd19f1a1ad6481297d06fb65c495e5247593139577d93be2cbe939aa3c8764380bd92df1fb2a5596314"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa4c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4a1c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:29 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200481, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x8, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x42810) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200481, 0x0) (async) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x8, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x42810) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) (async) 02:11:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (async) r2 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d61}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x86, 0x6, "5a733d5420483ffac79a0f0c77a16af31ff39ecdf268d7708aafe2ddbddd7b7b3d3b4fea5b070f2eedf5dee90afec1864dbc50b57f37c636b8fbc851f0ee7e6bc0700ec7b3022168def65d3082c262092bc50a00ccd80abc0fd19f1a1ad6481297d06fb65c495e5247593139577d93be2cbe939aa3c8764380bd92df1fb2a5596314"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa4c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4a1c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x200481, 0x0) sendmsg$IPSET_CMD_SAVE(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x30, 0x8, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x42810) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @private2, 0xd}, 0x1c) 02:11:30 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$IPVS_CMD_GET_DEST(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x60, 0x0, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e23}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x5}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x18, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@private0}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040040}, 0x40001) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r1, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0xfc, r3, 0x1, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xf}, @NL80211_ATTR_KEYS={0x14, 0x51, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "cf624e3656"}]}]}, @NL80211_ATTR_IE={0xa7, 0x2a, [@mesh_chsw={0x76, 0x6, {0x1, 0xab, 0x20, 0x3f}}, @erp={0x2a, 0x1, {0x0, 0x0, 0x1}}, @random={0x8, 0x7c, "1bf92184579637d2392e1c1df6668963c2aaa9531eb660578ef77f129eef044617062bb6be172a34fb28bf78967b3e9c3e9490dea86f6f35b380130c11a4e28f01c3a2e5d2c1ab22adaf19239d3340e0616ccc1e1f74fccb24740f928fa8a0a8b3be679a40bce3137ffe55a21b0671ee7895549b6bd704c87ecac86d"}, @chsw_timing={0x68, 0x4, {0x20, 0x2}}, @mesh_config={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x1, 0x7f, 0x21}}, @erp={0x2a, 0x1, {0x1}}, @ssid={0x0, 0x6, @default_ap_ssid}]}, @NL80211_ATTR_EXTERNAL_AUTH_SUPPORT={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0xc000000, {0xd0f9, 0x1ff, 0x1, 0x9}}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x810}, 0x20044081) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r6 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r6, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfd, 0x40}, 0xc) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x219298) 02:11:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x2000000) 02:11:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d61}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x86, 0x6, "5a733d5420483ffac79a0f0c77a16af31ff39ecdf268d7708aafe2ddbddd7b7b3d3b4fea5b070f2eedf5dee90afec1864dbc50b57f37c636b8fbc851f0ee7e6bc0700ec7b3022168def65d3082c262092bc50a00ccd80abc0fd19f1a1ad6481297d06fb65c495e5247593139577d93be2cbe939aa3c8764380bd92df1fb2a5596314"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa4c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4a1c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket(0x0, 0x3, 0x4) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x5, 0x0, 0x0, {0x3, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x7, 0x0, 0x2}, [@NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5d61}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0xd0, 0x2, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x86, 0x6, "5a733d5420483ffac79a0f0c77a16af31ff39ecdf268d7708aafe2ddbddd7b7b3d3b4fea5b070f2eedf5dee90afec1864dbc50b57f37c636b8fbc851f0ee7e6bc0700ec7b3022168def65d3082c262092bc50a00ccd80abc0fd19f1a1ad6481297d06fb65c495e5247593139577d93be2cbe939aa3c8764380bd92df1fb2a5596314"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8}]}, @NFT_MSG_NEWCHAIN={0x74, 0x3, 0xa, 0x101, 0x0, 0x0, {0x5, 0x0, 0x6}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x4c, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xffff}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xa4c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x4a1c}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x10001}]}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x208}, 0x1, 0x0, 0x0, 0x40004}, 0x800) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xfffff) 02:11:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) (async, rerun: 64) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:30 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x6c, 0x0, @dev, 0x6}, 0x1c) 02:11:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2, 0x2}, 0x18) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000000c0)={0x8, 'vxcan1\x00', {'team_slave_1\x00'}, 0x4}) 02:11:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x3000000) 02:11:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2, 0x2}, 0x18) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000000c0)={0x8, 'vxcan1\x00', {'team_slave_1\x00'}, 0x4}) 02:11:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x80080) 02:11:30 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x100000}, 0xc) (async, rerun: 32) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 32) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:30 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x2, 0x2}, 0x18) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f00000000c0)={0x8, 'vxcan1\x00', {'team_slave_1\x00'}, 0x4}) 02:11:30 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0xff01) 02:11:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3bfe, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}}, 0x84) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) sendmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1ff, @local, 0x80000000, 0x1}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000200)="7dda838a910ab42f885c115282dc74d20a2b31ce9aace0a11e92af5dad6483aef893ca4c302abf5de7a574a244b8afb17f447867ff0476c000799c43c2a16d3a1fc7e5d9527ebc7b390b1459e878f58a1f97ce5f99a866bbdf00cca17f", 0x5d}, {&(0x7f00000002c0)="72bf9a82c52bc01b5bec969d7ff03f94ca66de108a9bb3c8e1178073638a9f965a7422576bdd6151c4a274bb223602d5cf6e65ed8e1b7023c3d82af3f0727ce9bb3c6be918569a95c0383ab1b3fba30ca61b6353e4077efdae73bb7da4638fd6e9ab28268f35bccd084abd6d415dbdf348ac917093e2", 0x76}, {&(0x7f0000000340)="43b59128e117a8254a7de41d13c4706dcffa17f22afd33a69284a2ae7cecc661973e25ec80bd1e1b64bcf7b3d1864003b2ebe7769f8dd3f8dc0a39fdd55d0cf957708f1d0f7b177687c6868c20dc08d62cdae168571820572e35f061dd33feee0fcb23e946e2cd2a566756d490b78ec3407d25d35fcbdded5997ec1c78ae193c7cec400fd1", 0x85}, {&(0x7f0000000400)="a7acadde24d75fe975ac01725d37f6ab54e8e11bdc15f0626a9974e5c57d2fd81a05d130293a709a40f0a6c4b6c09748be64e27867458522cfee93c7ad2959b051499bee3bf1b87bff", 0x49}, {&(0x7f0000001940)="01e9e1ef5d67410d068b94b601c94dd701e9dc92b3ae3535d6c269139acd", 0x1e}], 0x5, &(0x7f00000004c0)=[{0x1010, 0x0, 0x6, "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"}, {0x90, 0x104, 0x101, "a2eb052eb8281fbedb9beef70c5ecc71be57e0622ea7a446d60ad8b1d5031a4a31c83b01d0542768ee2c16060c12a8a5e8248e7d42c2eb25483db0532ea6fb939af43f1ae9f99fa5f92dfb78702e740b3992926ed7d0d1220eb217c1d6dd7a8a5fbb2c66e6320569647c7e5b3ed8f59f1ef45dfc801d9e4f9980"}, {0x78, 0x118, 0x9, "4c5d7651d04439d77f683cb27a4431b6ea1619facab067ce075744d1aac430d8840ff1881f0d801024c4d51ad06e844af8e27fa5723c7d1c1f4e0313bd525f4714cd13e84549186ada95290c4dba2b8d7bb73f950bb2dd0adda2826e971aee4a00dd77fd8608fb"}, {0x70, 0x29, 0x3f, "e0724db4534a16f694afc1d2f1b726390dd5722a4688b8b91c20db0240bf78adb77e28bd1cb34ac14054015a92797de8731a1d5bd7461687777203d2d5796b7041937ee646a512f4443de41dd083692cde277aa090df418a98495f"}, {0xe0, 0x103, 0x0, "8cf320dcddcc5f47776036a5129468b72fa457926e218c8ede1cc0a99391689ba5b8b90a0ffdd6cd14973679802c30835cdaafa8a54e40dda4d0108962d1ee537e8619d1916dc759c43adb9e80a3fe58d0a124e3b48cd2b3d949dbf3a93fcd5cb7cd401de6f90f22839bd4068f615a41a829a3c57408a4de56c92de814ca5a08fd135acb081a7086cfe7693c448c106619952c4a73ab4584bc369e34fa75b79a8d8fabb3136cfa1f266c3d2812f94d42ee82fe9c9ca44088448201424b6576540678b2fe705bcd31a7"}, {0xd8, 0x101, 0x21, "14a43aa3324e6d312d63dd8941f0c05a180c0dd90fe615523989a0ed1df23cc74311911f0e9411112d3c7229e8bc2d844f8d8e124630321e98f562275964de34bd2e8eee1ba70cb0ea453eba49ef885aaa225ce30685afd6aa9874ad4e5ea12f9e7b198fffbc7eb630805f29586d499ce56829d7447609b65d495f81f392526324db9e29955de9509865d4364a2c839ee1f3b8e5dfb3406f279a0b34ac6d5f1243f6903f22ea6e87e72520753edb9d3a5270f03ccc1bfe2c4ea1da7139c6d50f39d05b9d"}], 0x1340}}], 0x1, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40086}, 0x44004084) 02:11:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3bfe, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3bfe, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}}, 0x84) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1ff, @local, 0x80000000, 0x1}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000200)="7dda838a910ab42f885c115282dc74d20a2b31ce9aace0a11e92af5dad6483aef893ca4c302abf5de7a574a244b8afb17f447867ff0476c000799c43c2a16d3a1fc7e5d9527ebc7b390b1459e878f58a1f97ce5f99a866bbdf00cca17f", 0x5d}, {&(0x7f00000002c0)="72bf9a82c52bc01b5bec969d7ff03f94ca66de108a9bb3c8e1178073638a9f965a7422576bdd6151c4a274bb223602d5cf6e65ed8e1b7023c3d82af3f0727ce9bb3c6be918569a95c0383ab1b3fba30ca61b6353e4077efdae73bb7da4638fd6e9ab28268f35bccd084abd6d415dbdf348ac917093e2", 0x76}, {&(0x7f0000000340)="43b59128e117a8254a7de41d13c4706dcffa17f22afd33a69284a2ae7cecc661973e25ec80bd1e1b64bcf7b3d1864003b2ebe7769f8dd3f8dc0a39fdd55d0cf957708f1d0f7b177687c6868c20dc08d62cdae168571820572e35f061dd33feee0fcb23e946e2cd2a566756d490b78ec3407d25d35fcbdded5997ec1c78ae193c7cec400fd1", 0x85}, {&(0x7f0000000400)="a7acadde24d75fe975ac01725d37f6ab54e8e11bdc15f0626a9974e5c57d2fd81a05d130293a709a40f0a6c4b6c09748be64e27867458522cfee93c7ad2959b051499bee3bf1b87bff", 0x49}, {&(0x7f0000001940)="01e9e1ef5d67410d068b94b601c94dd701e9dc92b3ae3535d6c269139acd", 0x1e}], 0x5, &(0x7f00000004c0)=[{0x1010, 0x0, 0x6, "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"}, {0x90, 0x104, 0x101, "a2eb052eb8281fbedb9beef70c5ecc71be57e0622ea7a446d60ad8b1d5031a4a31c83b01d0542768ee2c16060c12a8a5e8248e7d42c2eb25483db0532ea6fb939af43f1ae9f99fa5f92dfb78702e740b3992926ed7d0d1220eb217c1d6dd7a8a5fbb2c66e6320569647c7e5b3ed8f59f1ef45dfc801d9e4f9980"}, {0x78, 0x118, 0x9, "4c5d7651d04439d77f683cb27a4431b6ea1619facab067ce075744d1aac430d8840ff1881f0d801024c4d51ad06e844af8e27fa5723c7d1c1f4e0313bd525f4714cd13e84549186ada95290c4dba2b8d7bb73f950bb2dd0adda2826e971aee4a00dd77fd8608fb"}, {0x70, 0x29, 0x3f, "e0724db4534a16f694afc1d2f1b726390dd5722a4688b8b91c20db0240bf78adb77e28bd1cb34ac14054015a92797de8731a1d5bd7461687777203d2d5796b7041937ee646a512f4443de41dd083692cde277aa090df418a98495f"}, {0xe0, 0x103, 0x0, "8cf320dcddcc5f47776036a5129468b72fa457926e218c8ede1cc0a99391689ba5b8b90a0ffdd6cd14973679802c30835cdaafa8a54e40dda4d0108962d1ee537e8619d1916dc759c43adb9e80a3fe58d0a124e3b48cd2b3d949dbf3a93fcd5cb7cd401de6f90f22839bd4068f615a41a829a3c57408a4de56c92de814ca5a08fd135acb081a7086cfe7693c448c106619952c4a73ab4584bc369e34fa75b79a8d8fabb3136cfa1f266c3d2812f94d42ee82fe9c9ca44088448201424b6576540678b2fe705bcd31a7"}, {0xd8, 0x101, 0x21, "14a43aa3324e6d312d63dd8941f0c05a180c0dd90fe615523989a0ed1df23cc74311911f0e9411112d3c7229e8bc2d844f8d8e124630321e98f562275964de34bd2e8eee1ba70cb0ea453eba49ef885aaa225ce30685afd6aa9874ad4e5ea12f9e7b198fffbc7eb630805f29586d499ce56829d7447609b65d495f81f392526324db9e29955de9509865d4364a2c839ee1f3b8e5dfb3406f279a0b34ac6d5f1243f6903f22ea6e87e72520753edb9d3a5270f03ccc1bfe2c4ea1da7139c6d50f39d05b9d"}], 0x1340}}], 0x1, 0x800) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40086}, 0x44004084) 02:11:31 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x74, 0x0, @dev, 0x6}, 0x1c) 02:11:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x4000000) 02:11:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x3bfe, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:31 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x48, 0x0, @dev, 0x6}, 0x1c) 02:11:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x0, 0x3, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="40f961b2b783530100f42300ce38213826f0ff002e17f10febca83c8b846acd45dfb7c06f14d8f8156d5a6550ed2f7931dff72bcbd7992c79bd4cf799fa32a0150a3cac578a636f6030bcd", @ANYRES32], 0x140}}, 0x0) (async) sendmsg$NFULNL_MSG_CONFIG(r1, &(0x7f0000001900)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x24, 0x1, 0x4, 0x401, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFULA_CFG_NLBUFSIZ={0x8, 0x3, 0x1, 0x0, 0x2}, @NFULA_CFG_CMD={0x5, 0x1, 0x3}]}, 0x24}}, 0x84) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) sendmmsg(r0, &(0x7f0000001800)=[{{&(0x7f0000000180)=@l2tp6={0xa, 0x0, 0x1ff, @local, 0x80000000, 0x1}, 0x80, &(0x7f0000001980)=[{&(0x7f0000000200)="7dda838a910ab42f885c115282dc74d20a2b31ce9aace0a11e92af5dad6483aef893ca4c302abf5de7a574a244b8afb17f447867ff0476c000799c43c2a16d3a1fc7e5d9527ebc7b390b1459e878f58a1f97ce5f99a866bbdf00cca17f", 0x5d}, {&(0x7f00000002c0)="72bf9a82c52bc01b5bec969d7ff03f94ca66de108a9bb3c8e1178073638a9f965a7422576bdd6151c4a274bb223602d5cf6e65ed8e1b7023c3d82af3f0727ce9bb3c6be918569a95c0383ab1b3fba30ca61b6353e4077efdae73bb7da4638fd6e9ab28268f35bccd084abd6d415dbdf348ac917093e2", 0x76}, {&(0x7f0000000340)="43b59128e117a8254a7de41d13c4706dcffa17f22afd33a69284a2ae7cecc661973e25ec80bd1e1b64bcf7b3d1864003b2ebe7769f8dd3f8dc0a39fdd55d0cf957708f1d0f7b177687c6868c20dc08d62cdae168571820572e35f061dd33feee0fcb23e946e2cd2a566756d490b78ec3407d25d35fcbdded5997ec1c78ae193c7cec400fd1", 0x85}, {&(0x7f0000000400)="a7acadde24d75fe975ac01725d37f6ab54e8e11bdc15f0626a9974e5c57d2fd81a05d130293a709a40f0a6c4b6c09748be64e27867458522cfee93c7ad2959b051499bee3bf1b87bff", 0x49}, {&(0x7f0000001940)="01e9e1ef5d67410d068b94b601c94dd701e9dc92b3ae3535d6c269139acd", 0x1e}], 0x5, &(0x7f00000004c0)=[{0x1010, 0x0, 0x6, "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"}, {0x90, 0x104, 0x101, "a2eb052eb8281fbedb9beef70c5ecc71be57e0622ea7a446d60ad8b1d5031a4a31c83b01d0542768ee2c16060c12a8a5e8248e7d42c2eb25483db0532ea6fb939af43f1ae9f99fa5f92dfb78702e740b3992926ed7d0d1220eb217c1d6dd7a8a5fbb2c66e6320569647c7e5b3ed8f59f1ef45dfc801d9e4f9980"}, {0x78, 0x118, 0x9, "4c5d7651d04439d77f683cb27a4431b6ea1619facab067ce075744d1aac430d8840ff1881f0d801024c4d51ad06e844af8e27fa5723c7d1c1f4e0313bd525f4714cd13e84549186ada95290c4dba2b8d7bb73f950bb2dd0adda2826e971aee4a00dd77fd8608fb"}, {0x70, 0x29, 0x3f, "e0724db4534a16f694afc1d2f1b726390dd5722a4688b8b91c20db0240bf78adb77e28bd1cb34ac14054015a92797de8731a1d5bd7461687777203d2d5796b7041937ee646a512f4443de41dd083692cde277aa090df418a98495f"}, {0xe0, 0x103, 0x0, "8cf320dcddcc5f47776036a5129468b72fa457926e218c8ede1cc0a99391689ba5b8b90a0ffdd6cd14973679802c30835cdaafa8a54e40dda4d0108962d1ee537e8619d1916dc759c43adb9e80a3fe58d0a124e3b48cd2b3d949dbf3a93fcd5cb7cd401de6f90f22839bd4068f615a41a829a3c57408a4de56c92de814ca5a08fd135acb081a7086cfe7693c448c106619952c4a73ab4584bc369e34fa75b79a8d8fabb3136cfa1f266c3d2812f94d42ee82fe9c9ca44088448201424b6576540678b2fe705bcd31a7"}, {0xd8, 0x101, 0x21, "14a43aa3324e6d312d63dd8941f0c05a180c0dd90fe615523989a0ed1df23cc74311911f0e9411112d3c7229e8bc2d844f8d8e124630321e98f562275964de34bd2e8eee1ba70cb0ea453eba49ef885aaa225ce30685afd6aa9874ad4e5ea12f9e7b198fffbc7eb630805f29586d499ce56829d7447609b65d495f81f392526324db9e29955de9509865d4364a2c839ee1f3b8e5dfb3406f279a0b34ac6d5f1243f6903f22ea6e87e72520753edb9d3a5270f03ccc1bfe2c4ea1da7139c6d50f39d05b9d"}], 0x1340}}], 0x1, 0x800) sendmsg$NFT_BATCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x4}, @NFT_OBJECT_COUNTER=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWCHAIN={0x20, 0x3, 0xa, 0x201, 0x0, 0x0, {0xc, 0x0, 0x9}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x68}, 0x1, 0x0, 0x0, 0x40086}, 0x44004084) 02:11:31 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='cpu.stat\x00', 0x275a, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x1ff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x1ff) fsetxattr(r0, &(0x7f0000000240)=@known='com.apple.system.Security\x00', &(0x7f0000000280)='./cgroup.net/syz1\x00', 0x12, 0x1) r4 = openat$cgroup_int(0xffffffffffffffff, &(0x7f00000001c0)='memory.swap.high\x00', 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_GET(0xffffffffffffffff, 0x0, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x1ff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x68, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x11}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x68}, 0x1, 0x0, 0x0, 0x800}, 0x4000050) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$sock_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0) sendmsg$netlink(r1, &(0x7f0000000580)={&(0x7f00000002c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x1000}, 0xc, &(0x7f00000000c0)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="a80000003600000429bd7000ffdbdf255b41cca98649431c8a27dc7ac632d0da5541b6c1f3a44713e600683831383112916e2130c01ddede6bafd22bd5fa2dfdcd0d2a14678304a7c1566f24515010df927afa660a1e98811418f280f7d4cf88fd0aef995783d862529314959fdc5e21e791b1f0db9394a339aa16734e3fdb5f3f541867809938046ce7dfd1ef1f304b58a666afd5a0b9400e4ba4663a0000"], 0xa8}, {&(0x7f0000000880)=ANY=[@ANYBLOB="b80200002500200026bd7000fbdbdf25cf00000004001200a780c8d26b915dde008172e63d5da4b85c8fb74ad7dc03f7177a768d708c8aa1aafd163f89", @ANYRES32, @ANYBLOB="83663d29864720d8d688d04e38bf9bf89906d4738b93c6b3d6cbac7af64028c2c16f1b8c04024afa05816b780acc048de48c96135ddc2fdb7a0064305fa3bb9730b8d0e49179a11a7f7795bb3d12215a4990a3e8845850fc33a196ec578508f0e05b006e1f25127b04acb446d39e1bcb99272be73f5d6316c1901ccc69be94ba98ad3305955f4a169e6b2e0a5acef39028fa8577e1f3ecf914071b8b0f8b5d5083b7485f26e843432d174e90097134bc9cd6c14988f4899440dd36", @ANYRES32=r4, @ANYRES64=r1, @ANYRESHEX, @ANYBLOB='\x00'], 0x2b8}, {&(0x7f0000002980)={0x1a58, 0xfffc, 0x10, 0x70bd2d, 0x9, "", [@nested={0x734, 0x8d, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='m\x00'}, @generic="5300000000000000dc38187c413c269267b39fbec7f5a9a39561d02e13f247eda9", @generic="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", @typed={0x8, 0x11, 0x0, 0x0, @pid}]}, @nested={0x4, 0x2}, @typed={0x59, 0xa, 0x0, 0x0, @binary="1eed0cff7021dda86f22eec86000c14bbf15c35fcfd8bc985277d08fa3d184619bd49017470ee8683f456108cc23369d42683d4cda66c120ec17a4c891b063c430a6966a4e6749adb96000b72d30fd8c9b1352d701"}, @nested={0x1269, 0x69, 0x0, 0x1, [@generic="7a98328fc76bc2081a855c1ba7ac29fb7cb24b5bddcce385b826eeb2585343bedacc9b5b6a6d2d24dfae2ff28e0acda64eb9f8044f7e5e07ac59d5f68641bb1bc0b6e1ed7cf497b4be8eab913fefb81cf7e9804e653a49389b9cb5a32b4cbf35beca0d66c79e721ea89d843030311e2c42b9adebc32c00a64bf5e48379c2fd36afdf568e4cd7568e66990345074c7a0f166e0a37", @typed={0x8, 0x2f, 0x0, 0x0, @uid=0xee01}, @typed={0x14, 0x51, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x5, 0x0}}, @typed={0xe1, 0xe, 0x0, 0x0, @binary="275285bb3c75a33e4793d85b94ab5451d10d0380f81c94e842cc0c3976c09d8aa194cd31c23fdbda498c7112fbd679240bb2f1881c081690673422036de8a4a7a6c4bd0dd8b0b1071195b9a252396f920e3b9442e769c37512374f038e3b1746048be044dc4f46a9ae1049c5f44e78776064c72739a3acbd9071a4968a49a6158cbcb1ee241f466a3a0f2d80df006bf284a30768d0acaf9ba380549e80e3067629f5446595d135e10a91e00e3f0730a5e8510feef74b44671e297cd1465b11482902103a9e80c196192e9d32c8a9fa5c51d4066f0d277c1de359856421"}, @typed={0x4, 0x50}, @generic="42390bc3d11f2db69976470a9d8e2b55a039331117a0f1cdff5a6d2df791342933f78055afefba25c88be5b4b9db5a1963def4f43fbd0b805575963c8a255188bab1391452b86194c4f0c6bdccbfdb29a669389c8d", @typed={0xc, 0x58, 0x0, 0x0, @u64=0x6}, @generic, @generic="d2c471c02397625544b5213653ff0d12d8dfb459013096d458fa5493ab019bb8f6021de69d652e5865e1cf1d6c50d35643dd8e867e33daa3c64102bcf9b6f2dda489ff975cc83b010bbdb520976a4f11de019657291e755f93a1dfb1f3960003d08b383c4a256eb864801115", @generic="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"]}, @generic="2fbc29e5e96ade303b98130ca49619dccb66f0f7dda78a43c2cc499b236955637f473361e4fd520f195333d4c7b91e279f7059709cfb9f178edb121bc28ae34ef3f722737a51"]}, 0x1a58}, {&(0x7f0000000a00)=ANY=[@ANYBLOB="800200002a0004f0008035ae11d9f6baf6235ecae3f9a568ebc244144b2a1b471ce65e320fab164a4bd8c5a2ce97ed6228c55e51f1b6cc744b104b622f84f1fcd4ae558bdd5198bb496f66453fac943e7933474d12cf61a2801ba25f803a28d9750d380618aa5798", @ANYRESHEX=r3, @ANYBLOB="14006100fe8000000000000000000000000000aabfb4c327513af50ed90ae2bd0a87280a99b62160ff076c4b5c1dde67b06f0554d6c81ae2ce88adf3ded4cc5063b5ee5a2c38304f2d8e64e1c1e1608e44e6819f245be2705582c379b58eccf0cc19f69d96a4accb176f08e8f9fb003c817776a6ff834481cfd602f4834445301897fdc39df0467e16818df72a6e66fbf1af54a88603088e9ee412ba6f60d23a2751c6b20bd9549ea6e87da0260ffda06f51c9e75a851abbdd7f2e7d8c03b861313d6e7bad195bd39febfba6955b7d4de20827a24d3b6df77fd0c458914ea4f72559de3433ad23a37dae153b23c251c8f45687af8872c349055d2468a2d78a2cd5998a006f80a75d9aa01daf586347dd291d1fadc802830d84539f936f08fc6f1f609461fdfee1bcc6637cf25ecf112d880e15bd4cfb32409838d11c26bbdd2c667d9246d5981102e1c208619e59fd4356e9d3eceb8d647ddf81f7eb7b371385f503340dd8f4e370f09c18bf5957f37cda9efd76180d116d73d132e670f46482d3da9411c52c4d012e2673bb000040009380d6b58c6d96ce4617d9d85821a1fd464c010fc0b483f3b0b2f907510292d8fb26ed61bb50da2e60660580108966d601710652ca23c6a3df073e01750c040086002f8986f08a516b1137e0645750791afb9c46728b0f0a6bb71dc27554f45b1e3545ae0af7ae089c52f1b6e3f5adadc145724013431915fc54524646daceefc3fdc56c7bb752c1785e4f0efb10f93744ac7df6b19de27fb2b9eb13c11baa5394a60a0ad02489f00c979c64d7c7dfb4efa6b1fb48f5dabb993a2fc7380bf2ec73dba3f3c22eb267014f1a82430800380000000000000000b02429a8999cbe0ae5b161ac7b4352f2d1cc2b3793"], 0x280}], 0x4, &(0x7f0000000480), 0x0, 0x8001}, 0x800) write$binfmt_script(r3, &(0x7f00000009c0)=ANY=[@ANYRESOCT], 0xfffffd9d) sendfile(r2, r3, 0x0, 0x8000002b) 02:11:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20060000070a0108000000000000000007000008090000"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x40000) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20060000070a0108000000000000000007000008090000"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x40000) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) (async) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20060000070a0108000000000000000007000008090000"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x40000) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) 02:11:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x201, 0x0, 0x0, {0x8, 0x0, 0x4}, [@CTA_LABELS_MASK={0x1c, 0x17, [0x629, 0x4, 0x40, 0x1, 0x7, 0x7]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x0, 0x8, 0x9, 0x483c, 0x7, 0x0, 0x5, 0x0]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x20}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x810) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x384, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x154, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffeff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd1fb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x372}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xef18}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x479}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0x214, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5d02364b}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb71}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x984}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ae}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff2d7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4bb1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x17}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x98d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x622}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x79}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd8e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) [ 567.723151][ T3682] mxuport 5-1:0.0: Firmware moxa/moxa-1653.fw not found [ 567.723177][ T3682] mxuport 5-1:0.0: Using device firmware version vef.dd.31 02:11:31 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20060000070a0108000000000000000007000008090000"], 0x20}, 0x1, 0x0, 0x0, 0x40011}, 0x40000) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x201, 0x0, 0x0, {0x8, 0x0, 0x4}, [@CTA_LABELS_MASK={0x1c, 0x17, [0x629, 0x4, 0x40, 0x1, 0x7, 0x7]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x0, 0x8, 0x9, 0x483c, 0x7, 0x0, 0x5, 0x0]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x20}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x810) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x384, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x154, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffeff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd1fb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x372}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xef18}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x479}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0x214, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5d02364b}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb71}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x984}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ae}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff2d7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4bb1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x17}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x98d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x622}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x79}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd8e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x201, 0x0, 0x0, {0x8, 0x0, 0x4}, [@CTA_LABELS_MASK={0x1c, 0x17, [0x629, 0x4, 0x40, 0x1, 0x7, 0x7]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x0, 0x8, 0x9, 0x483c, 0x7, 0x0, 0x5, 0x0]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x20}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x810) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x384, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x154, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffeff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd1fb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x372}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xef18}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x479}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0x214, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5d02364b}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb71}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x984}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ae}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff2d7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4bb1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x17}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x98d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x622}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x79}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd8e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) [ 567.723258][ T3682] mxuport 5-1:0.0: required endpoints missing [ 567.744254][ T3682] usb 5-1: USB disconnect, device number 14 02:11:31 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000002c0)={0x0, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4000040003, 0x0) openat$cgroup_ro(r2, &(0x7f0000001580)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x7fffffff, 0x800) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x141200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x440a0}, 0x20044004) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010800100000000000000100000a09000200bf60ebb57ebe560e050001000700000005000400000000c540ec92f600"], 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r5, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001540)={'syztnl1\x00', &(0x7f00000014c0)={'ip6tnl0\x00', r6, 0x2f, 0xfe, 0x7f, 0x6, 0x47, @private2, @empty, 0x80, 0x40, 0x4, 0x7}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:32 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x7a, 0x0, @dev, 0x6}, 0x1c) 02:11:32 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x64, 0x0, 0x1, 0x201, 0x0, 0x0, {0x8, 0x0, 0x4}, [@CTA_LABELS_MASK={0x1c, 0x17, [0x629, 0x4, 0x40, 0x1, 0x7, 0x7]}, @CTA_LABELS={0x24, 0x16, 0x1, 0x0, [0x0, 0x8, 0x9, 0x483c, 0x7, 0x0, 0x5, 0x0]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0xfffffffd}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x20}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x810) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0x384, r1, 0x100, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_REG_RULES={0x154, 0x22, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffe}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffffeff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7fff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7fffffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_START={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x7}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x3ff}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x6}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3f}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xd1fb}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0xc9}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x800}, @NL80211_ATTR_FREQ_RANGE_END={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x372}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xfffffff7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x3}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x100}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xef18}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x20}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x101}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0xffff}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x401}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x479}]}]}, @NL80211_ATTR_DFS_REGION={0x5, 0x92, 0x8}, @NL80211_ATTR_REG_RULES={0x214, 0x22, 0x0, 0x1, [{0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x2}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x3}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x9f}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5d02364b}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x1}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x20}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x8}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3f}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x1f}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xb71}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x984}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x8}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x4}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x4}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7ae}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0xfffff2d7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x1}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x6}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfff}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x5}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x4bb1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x17}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x5}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x98d}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x622}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x6}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x79}, @NL80211_ATTR_DFS_CAC_TIME={0x8}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x9}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x80}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0xfffffffa}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7f}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x4}, @NL80211_ATTR_FREQ_RANGE_START={0x8, 0x2, 0x7}, @NL80211_ATTR_FREQ_RANGE_END={0x8, 0x3, 0x3}, @NL80211_ATTR_POWER_RULE_MAX_EIRP={0x8, 0x6, 0x2}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_DFS_CAC_TIME={0x8, 0x7, 0x6}, @NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x5}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x5}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0xd8e}, @NL80211_ATTR_POWER_RULE_MAX_ANT_GAIN={0x8, 0x5, 0x6}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x81}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_ATTR_REG_RULE_FLAGS={0x8, 0x1, 0x7ff}]}]}]}, 0x384}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:32 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000002c0)={0x0, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) (async, rerun: 64) r3 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) close(r3) (async, rerun: 64) splice(r2, 0x0, r3, 0x0, 0x4000040003, 0x0) (rerun: 64) openat$cgroup_ro(r2, &(0x7f0000001580)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) (async) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async, rerun: 64) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) (rerun: 64) syz_open_dev$vcsa(&(0x7f00000000c0), 0x7fffffff, 0x800) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x141200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x440a0}, 0x20044004) (async, rerun: 64) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010800100000000000000100000a09000200bf60ebb57ebe560e050001000700000005000400000000c540ec92f600"], 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x20000000) (rerun: 64) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r5, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001540)={'syztnl1\x00', &(0x7f00000014c0)={'ip6tnl0\x00', r6, 0x2f, 0xfe, 0x7f, 0x6, 0x47, @private2, @empty, 0x80, 0x40, 0x4, 0x7}}) (async, rerun: 64) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) (rerun: 64) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:32 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000002c0)={0x0, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4000040003, 0x0) openat$cgroup_ro(r2, &(0x7f0000001580)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) syz_open_dev$vcsa(&(0x7f00000000c0), 0x7fffffff, 0x800) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x141200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x440a0}, 0x20044004) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010800100000000000000100000a09000200bf60ebb57ebe560e050001000700000005000400000000c540ec92f600"], 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r5, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001540)={'syztnl1\x00', &(0x7f00000014c0)={'ip6tnl0\x00', r6, 0x2f, 0xfe, 0x7f, 0x6, 0x47, @private2, @empty, 0x80, 0x40, 0x4, 0x7}}) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x5000000) 02:11:33 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) syz_clone3(&(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, {0x35}, &(0x7f0000000340)=""/164, 0xa4, &(0x7f0000000400)=""/70, &(0x7f00000024c0)}, 0x58) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)) process_vm_writev(0x0, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/38, 0x26}, {&(0x7f0000001a80)=""/248, 0xf8}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) listen(r3, 0x560f1bd9) r4 = getpid() process_vm_readv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/210, 0xd2}, {&(0x7f0000001740)=""/155, 0x9b}], 0x7, &(0x7f0000001a00)=[{&(0x7f0000001800)=""/218, 0xda}, {&(0x7f0000001900)=""/49, 0x31}, {&(0x7f0000001940)=""/147, 0x93}], 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 02:11:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004001) 02:11:33 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r0, 0xd0009412, &(0x7f00000002c0)={0x0, 0x8}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000040)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x4000040003, 0x0) (async) openat$cgroup_ro(r2, &(0x7f0000001580)='blkio.bfq.io_service_bytes\x00', 0x0, 0x0) bind$netlink(r1, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) openat$cgroup_int(r0, &(0x7f0000000080)='notify_on_release\x00', 0x2, 0x0) (async) syz_open_dev$vcsa(&(0x7f00000000c0), 0x7fffffff, 0x800) (async) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) r5 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240), 0x141200, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000013c0)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001380)={&(0x7f0000001300)={{0x14}, [@NFT_MSG_DELOBJ={0x30, 0x14, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x6}]}], {0x14}}, 0x58}, 0x1, 0x0, 0x0, 0x440a0}, 0x20044004) (async) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000000206010800100000000000000100000a09000200bf60ebb57ebe560e050001000700000005000400000000c540ec92f600"], 0x30}, 0x1, 0x0, 0x0, 0x400c004}, 0x20000000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001480)={r5, 0x58, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000001540)={'syztnl1\x00', &(0x7f00000014c0)={'ip6tnl0\x00', r6, 0x2f, 0xfe, 0x7f, 0x6, 0x47, @private2, @empty, 0x80, 0x40, 0x4, 0x7}}) (async) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) (fail_nth: 1) 02:11:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x6000000) 02:11:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004001) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004001) (async) 02:11:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELSETELEM={0x1d5c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d10, 0x3, 0x0, 0x1, [{0x4}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x43}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_ADDR_MAX={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x26}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, {0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x164, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9c}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff8cb4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x1ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "277731cb13e1f4f1f9d122a4a929bffef0a06188e02a8121f4aa8f32c83af90a3919eb68dde8c2625a9b27d267286c6b6c5bcb695df45ec5e8795cbac2c6b0399ab8814bf8599f54865a1ab5ee2b61fbf5da7e3cf9a695c2ebd88331ec5e2dde2882941e38182e8bed21f3f4a7062e5435cf98eb0b31b43206a1ce17fafa49af02c452e35eb8f0913e6b99d2eb3b719148d6fe9fc0b76975a1265ea83aa094e9e0a10757f945aaa3786d5e51f0c8348ff7ded1396eb0ef2b89a8cfc72f436d2ab72cc49e837a27a1763ce8140535009663c26ddb31f7cd4c3e486e7964e43b5e4f0285b76715c0553d7cad09fa34adc63f81"}, @NFTA_DATA_VALUE={0xf0, 0x1, "88c37d33cd36065f779eb3444f5d34107f0170ba3ba29ad28db376cf88539567d65f5ce26260d974f2dedaae9c885bda0762a4eeaa5eaf0129e0eb006c824ac36175693725d587ebe026eee60fc8299fb8c9279cef7d72bed32264aa37655c17560837b0e5f5efaa32cb722042ccd08ba289d7c61acaab739a5c272a95f15199806a7821bf3bf7fb3bf95dbed0db9263cc80ccf3d04d56f761bbf5578b8f0d1412843ebdc106d6a9bda52e9248bea0f7217ff00a82d3b0e67550e6625fb419d9a9a88b21e0089ae0c2fc3aa82af41a0f5525f9826fa953d9c9362e93345912c9797f20c0e246be08943710ff"}]}, @NFTA_SET_ELEM_USERDATA={0x21, 0x6, 0x1, 0x0, "51fe0a529fa3e55d61bdb1a3c01fea27593b96eb77c348b14d38c6e392"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x17c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x30c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x7d, 0x1, "89a9fd3118bdcf768e67c3f4c7a65b32d416037b824b9066df7c43e0b623e5b1e07235f36f993504ee788b2b5756e978ace1daa5f4df4a9353524bc3eec43532bca00014d5e58d85c404125753ab35a83ddf4a2ba763570762bab22fa07bdc283b8fb98187f1b0e307eeb02ae4946f2c392ce92302cb833ce2"}, @NFTA_DATA_VALUE={0xd3, 0x1, "a4b1dd69afb2d9680a6f1f7a8e4007fa9c9d33270f5dd0b05be845d9de2620b1233df37db959559e1c198c4b25ea513412510cfc53d707de92d6d0b731a0a516d1b08c97b23bdeab59f69c2b0804361e011210b25ce93274bcb131f9a178c26fb359c0915e333429f79f4e57282ba86e9f514b5874abb813603887d48f658e18ad4794835f61951e8be8f9314bfc850b818384deaaf8583eac20201e8ae05069d865a24c0adafaea44ab2ed978f03624556b1b14cfc5fc4cacd377cb21932db5455b0f41b419e6be2442f0daa69ef5"}, @NFTA_DATA_VALUE={0xb4, 0x1, "16fec5798631875c1ab5219edf62b5d217888945ed7282dcce594404c52a0c2b3f5a14148d3e530d413a9ca6dd1f22d8cd3497f55c25f309682315a76acca714234d3590350410cc27c17172be5c6f1e0b99c90d19b9216c42f3a17e160d41d3b0ba109374a41c593afcd572cf1312d2fc95ad0c251f8f5729c22406db325f4898b12f92bb565144e1aedfaa22f3194d3dab2fae65db2614b1cde76835c869e537fd6a578bd4a76af2a4278e60349116"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x6e, 0x1, "a465e68169b434c170465aeffca0462a6babdd1941e3cf01f5d26d5650c4e2fa2755acc8070efbb522acb80baaa7736b78df316921b85aa289968f1bf0d2fbe5e47e1187d01e175040cd972335726fb0831e98166de57553e04a254e0376e7f5b4e3dd371ea7ee69c130"}, @NFTA_DATA_VALUE={0x28, 0x1, "76fa1d7cc5755f038d196aaa632ab34887b8c417b818c8ea47a8e9e2ce9e55d1476be07c"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "01bc9fb136e4914cdc4a7cde4a02761ded0717f43eba4d3562f1255cb281c23ad5"}]}, @NFTA_SET_ELEM_KEY_END={0x12b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "5c88681d5ad2c6f51732537c94a946f63b17225f150d2b5e9c4e5f261ba1583a1e07c74cb5a08033ef74e518c0773bbbb9b3dffc31069b0379d5e3b41847c5b6d053dc22351992295d25f5a9087f427a67dd731cefaaff49711893a940f3f23462c9906eab919674ffd4069e6c4f4c9801edb83208ec99979ba9436f240976408bcae2781221337a583afdd818700e57c86cddfd763d0bda224e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0xd7, 0x1, "61c35347ad7ae1c95b0ba3103edff87132f7485a95cc480edf9ad0d9fa25a9b9320f7bc1c48791bff2bc5dda9d1f7496613b2214caba55761e33ff2dbc07ec050d012964b828b994a74f68a2ac3c4c7e86d7d32eef021dcc590aa9bcd377f32e0ff01c93f4a99544267675a345fcdc86e238240c8513712763553a2c159cfaf8f4cf6a6b0d4392281d73eabbea3f3d1caf26c907cc5bbe58b02dedc85ee98ec29257014089c7addb4cb93152553806cc574ffface07454ab3b301801790834f0e23fd0a6de54d546ca544609f8a77743b0486e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xdba8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf95}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x300}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "5476f1e22c2f9d3561bc9ae17944243b5f838f75f94cfa64524907091862655d0e119915c7d73f93ddd3d90b2b9578c27f7e0844d734900a881000d9afe80428732e727962535cb265d065069a07c1c0cc7d6d7a3395338c9f2e62955baf6c1f72d12e3cfa8a2f5d1aedc5389e32d077a0e328c6d7dceee23206661e4b7f7fe185d07802efd60be1ea96777abbcc8db7f5bca541c51fad795b684ab173cc8ed17d796939c4e65a30b8c20a0147bac6e467ce011f957c9a3162a50a16ce4559019b2b0fa91274d128cb0411030728d10cd00fb83ae2e021988cabb8e5b09df5eb30f7695b"}, @NFTA_DATA_VALUE={0x50, 0x1, "d32499a40ad3255e9028e7e2cfdbc861e604bb3233bac5a90edcb5a76f4c8c476a9088d8a33e0288751f9e331ca24362e5fe9aa1feb8e2afec3222369879eb2a1c35f81b7f32b619bb55e93f"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x2c4, 0x8, 0xa, 0x402, 0x0, 0x0, {0x5}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8100}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xa7, 0x7, 0x1, 0x0, "d646db1edb5ed3052c5cbaf27f902686eaede8b587fb8e6672ce59c88d6844db154151d1248e4b121ffc39059c4912449b853d30276c0f0e97e95a1ff396c814bac668b369060a4d0a9221977c65871baa6bbffcad688e8d0d862faa1d5b8818f5405f6d775f4f0bde14c5671688d6e2dfa4f6c1287399eb447128635f0408e1660812bc76ea7e2db60d92cb16ed04b52ef5f7bd6143f20507787b0cd51cd9e5c59b10"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe7}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "7ebfe981ce44b56dc07bc8c323168c8b64c8f8072aff64a938179d49c9eacf7711f740b05513f1fba959a0d7970dd9c34fb778c82b4dfacb9691be9ec6984719c5b5377dedc5f81155207928c0bfc3072e0148b977562e760fc22dbe481b2d50a508f945dfbf03aeadb81729a917be35fc17f79be9640c0dedeef9dc0900db410a6bf181efff65f182f33148598e03e54275bdf72194fbce60463d9006dd"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x7ff}]}], {0x14}}, 0x2048}, 0x1, 0x0, 0x0, 0x2040800}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELOBJ={0x104, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x86, 0x8, "dd59c48adb51a0bbac4d3889a90f0d4683b9709705b4eceb96d68906d88ccf34563f4bc81506d9c2ff3d3770ff3b54acc04ac3a299d614e3cfb1a185d64493911fc7f75259c463176fc0a38779c526d309f6b4612cdd8e1732664d13ff68dac29a0b0397d602e78b80a139632328041bb56f878c0d8396163fb24ca70573593491a2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_USERDATA={0xd3, 0x7, 0x1, 0x0, "6fa3fbbe35574d29d705a69133e95a751fa2048eb4accd948b3d29eeda168b8a5be6dbe21799f9e45e7bc28a5f569798fca614c241061eb6359dae9d221c4c3a46db5b2dd6d5189963619454a6a7565e723b50ec4660f28a417a11c3b16a650ee078d3375be4751d2f0aa19f31d296ee5b7368deea7356fa6133a4f4d944045df9bc619ffc39fb22d2fb93f31d1765905753b62b7b12ccaec88cb94aff0a6e3acfeb4b0af152c47e0072c1b4328e5a57a8b254015906baac9e14747971b35cb450f50f7afdb5a7ae21f89ecaa0133f"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0xf4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x62, 0x6, "e17d4743e007e1ff4773c1f50d28e75f3e06ddb9dcda156f53e5f9c65fafe147d73fd22596d00b7080d3355238551eb1ac91f8148d7a7154e0b918c3c584e5a4ed0ef4abba9dcdce613a43660e79d581ded663ee21ba3d2afe54caf002b3"}, @NFTA_TABLE_USERDATA={0x79, 0x6, "4bcc210e7443197e0e383d39a80a5b425add1fce78058275256e2cc69166e790e0701b8e64d14931d3537947eae7026db61d549d01578f0bd83b5d90506262cd2dcebb0fbfa630df9b1119bbd0593625cca14efedf21787ad562fc6e0ecaf20390a41aaac8505dea3d97c1ab46f7fa865521b57927"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}]}], {0x14}}, 0x450}, 0x1, 0x0, 0x0, 0x11}, 0x4000084) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:33 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x84, 0x0, @dev, 0x6}, 0x1c) [ 569.376376][T13796] FAULT_INJECTION: forcing a failure. [ 569.376376][T13796] name fail_usercopy, interval 1, probability 0, space 0, times 0 02:11:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELSETELEM={0x1d5c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d10, 0x3, 0x0, 0x1, [{0x4}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x43}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_ADDR_MAX={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x26}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, {0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x164, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9c}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff8cb4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x1ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "277731cb13e1f4f1f9d122a4a929bffef0a06188e02a8121f4aa8f32c83af90a3919eb68dde8c2625a9b27d267286c6b6c5bcb695df45ec5e8795cbac2c6b0399ab8814bf8599f54865a1ab5ee2b61fbf5da7e3cf9a695c2ebd88331ec5e2dde2882941e38182e8bed21f3f4a7062e5435cf98eb0b31b43206a1ce17fafa49af02c452e35eb8f0913e6b99d2eb3b719148d6fe9fc0b76975a1265ea83aa094e9e0a10757f945aaa3786d5e51f0c8348ff7ded1396eb0ef2b89a8cfc72f436d2ab72cc49e837a27a1763ce8140535009663c26ddb31f7cd4c3e486e7964e43b5e4f0285b76715c0553d7cad09fa34adc63f81"}, @NFTA_DATA_VALUE={0xf0, 0x1, "88c37d33cd36065f779eb3444f5d34107f0170ba3ba29ad28db376cf88539567d65f5ce26260d974f2dedaae9c885bda0762a4eeaa5eaf0129e0eb006c824ac36175693725d587ebe026eee60fc8299fb8c9279cef7d72bed32264aa37655c17560837b0e5f5efaa32cb722042ccd08ba289d7c61acaab739a5c272a95f15199806a7821bf3bf7fb3bf95dbed0db9263cc80ccf3d04d56f761bbf5578b8f0d1412843ebdc106d6a9bda52e9248bea0f7217ff00a82d3b0e67550e6625fb419d9a9a88b21e0089ae0c2fc3aa82af41a0f5525f9826fa953d9c9362e93345912c9797f20c0e246be08943710ff"}]}, @NFTA_SET_ELEM_USERDATA={0x21, 0x6, 0x1, 0x0, "51fe0a529fa3e55d61bdb1a3c01fea27593b96eb77c348b14d38c6e392"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x17c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x30c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x7d, 0x1, "89a9fd3118bdcf768e67c3f4c7a65b32d416037b824b9066df7c43e0b623e5b1e07235f36f993504ee788b2b5756e978ace1daa5f4df4a9353524bc3eec43532bca00014d5e58d85c404125753ab35a83ddf4a2ba763570762bab22fa07bdc283b8fb98187f1b0e307eeb02ae4946f2c392ce92302cb833ce2"}, @NFTA_DATA_VALUE={0xd3, 0x1, "a4b1dd69afb2d9680a6f1f7a8e4007fa9c9d33270f5dd0b05be845d9de2620b1233df37db959559e1c198c4b25ea513412510cfc53d707de92d6d0b731a0a516d1b08c97b23bdeab59f69c2b0804361e011210b25ce93274bcb131f9a178c26fb359c0915e333429f79f4e57282ba86e9f514b5874abb813603887d48f658e18ad4794835f61951e8be8f9314bfc850b818384deaaf8583eac20201e8ae05069d865a24c0adafaea44ab2ed978f03624556b1b14cfc5fc4cacd377cb21932db5455b0f41b419e6be2442f0daa69ef5"}, @NFTA_DATA_VALUE={0xb4, 0x1, "16fec5798631875c1ab5219edf62b5d217888945ed7282dcce594404c52a0c2b3f5a14148d3e530d413a9ca6dd1f22d8cd3497f55c25f309682315a76acca714234d3590350410cc27c17172be5c6f1e0b99c90d19b9216c42f3a17e160d41d3b0ba109374a41c593afcd572cf1312d2fc95ad0c251f8f5729c22406db325f4898b12f92bb565144e1aedfaa22f3194d3dab2fae65db2614b1cde76835c869e537fd6a578bd4a76af2a4278e60349116"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x6e, 0x1, "a465e68169b434c170465aeffca0462a6babdd1941e3cf01f5d26d5650c4e2fa2755acc8070efbb522acb80baaa7736b78df316921b85aa289968f1bf0d2fbe5e47e1187d01e175040cd972335726fb0831e98166de57553e04a254e0376e7f5b4e3dd371ea7ee69c130"}, @NFTA_DATA_VALUE={0x28, 0x1, "76fa1d7cc5755f038d196aaa632ab34887b8c417b818c8ea47a8e9e2ce9e55d1476be07c"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "01bc9fb136e4914cdc4a7cde4a02761ded0717f43eba4d3562f1255cb281c23ad5"}]}, @NFTA_SET_ELEM_KEY_END={0x12b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "5c88681d5ad2c6f51732537c94a946f63b17225f150d2b5e9c4e5f261ba1583a1e07c74cb5a08033ef74e518c0773bbbb9b3dffc31069b0379d5e3b41847c5b6d053dc22351992295d25f5a9087f427a67dd731cefaaff49711893a940f3f23462c9906eab919674ffd4069e6c4f4c9801edb83208ec99979ba9436f240976408bcae2781221337a583afdd818700e57c86cddfd763d0bda224e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0xd7, 0x1, "61c35347ad7ae1c95b0ba3103edff87132f7485a95cc480edf9ad0d9fa25a9b9320f7bc1c48791bff2bc5dda9d1f7496613b2214caba55761e33ff2dbc07ec050d012964b828b994a74f68a2ac3c4c7e86d7d32eef021dcc590aa9bcd377f32e0ff01c93f4a99544267675a345fcdc86e238240c8513712763553a2c159cfaf8f4cf6a6b0d4392281d73eabbea3f3d1caf26c907cc5bbe58b02dedc85ee98ec29257014089c7addb4cb93152553806cc574ffface07454ab3b301801790834f0e23fd0a6de54d546ca544609f8a77743b0486e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xdba8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf95}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x300}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "5476f1e22c2f9d3561bc9ae17944243b5f838f75f94cfa64524907091862655d0e119915c7d73f93ddd3d90b2b9578c27f7e0844d734900a881000d9afe80428732e727962535cb265d065069a07c1c0cc7d6d7a3395338c9f2e62955baf6c1f72d12e3cfa8a2f5d1aedc5389e32d077a0e328c6d7dceee23206661e4b7f7fe185d07802efd60be1ea96777abbcc8db7f5bca541c51fad795b684ab173cc8ed17d796939c4e65a30b8c20a0147bac6e467ce011f957c9a3162a50a16ce4559019b2b0fa91274d128cb0411030728d10cd00fb83ae2e021988cabb8e5b09df5eb30f7695b"}, @NFTA_DATA_VALUE={0x50, 0x1, "d32499a40ad3255e9028e7e2cfdbc861e604bb3233bac5a90edcb5a76f4c8c476a9088d8a33e0288751f9e331ca24362e5fe9aa1feb8e2afec3222369879eb2a1c35f81b7f32b619bb55e93f"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x2c4, 0x8, 0xa, 0x402, 0x0, 0x0, {0x5}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8100}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xa7, 0x7, 0x1, 0x0, "d646db1edb5ed3052c5cbaf27f902686eaede8b587fb8e6672ce59c88d6844db154151d1248e4b121ffc39059c4912449b853d30276c0f0e97e95a1ff396c814bac668b369060a4d0a9221977c65871baa6bbffcad688e8d0d862faa1d5b8818f5405f6d775f4f0bde14c5671688d6e2dfa4f6c1287399eb447128635f0408e1660812bc76ea7e2db60d92cb16ed04b52ef5f7bd6143f20507787b0cd51cd9e5c59b10"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe7}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "7ebfe981ce44b56dc07bc8c323168c8b64c8f8072aff64a938179d49c9eacf7711f740b05513f1fba959a0d7970dd9c34fb778c82b4dfacb9691be9ec6984719c5b5377dedc5f81155207928c0bfc3072e0148b977562e760fc22dbe481b2d50a508f945dfbf03aeadb81729a917be35fc17f79be9640c0dedeef9dc0900db410a6bf181efff65f182f33148598e03e54275bdf72194fbce60463d9006dd"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x7ff}]}], {0x14}}, 0x2048}, 0x1, 0x0, 0x0, 0x2040800}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELOBJ={0x104, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x86, 0x8, "dd59c48adb51a0bbac4d3889a90f0d4683b9709705b4eceb96d68906d88ccf34563f4bc81506d9c2ff3d3770ff3b54acc04ac3a299d614e3cfb1a185d64493911fc7f75259c463176fc0a38779c526d309f6b4612cdd8e1732664d13ff68dac29a0b0397d602e78b80a139632328041bb56f878c0d8396163fb24ca70573593491a2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_USERDATA={0xd3, 0x7, 0x1, 0x0, "6fa3fbbe35574d29d705a69133e95a751fa2048eb4accd948b3d29eeda168b8a5be6dbe21799f9e45e7bc28a5f569798fca614c241061eb6359dae9d221c4c3a46db5b2dd6d5189963619454a6a7565e723b50ec4660f28a417a11c3b16a650ee078d3375be4751d2f0aa19f31d296ee5b7368deea7356fa6133a4f4d944045df9bc619ffc39fb22d2fb93f31d1765905753b62b7b12ccaec88cb94aff0a6e3acfeb4b0af152c47e0072c1b4328e5a57a8b254015906baac9e14747971b35cb450f50f7afdb5a7ae21f89ecaa0133f"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0xf4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x62, 0x6, "e17d4743e007e1ff4773c1f50d28e75f3e06ddb9dcda156f53e5f9c65fafe147d73fd22596d00b7080d3355238551eb1ac91f8148d7a7154e0b918c3c584e5a4ed0ef4abba9dcdce613a43660e79d581ded663ee21ba3d2afe54caf002b3"}, @NFTA_TABLE_USERDATA={0x79, 0x6, "4bcc210e7443197e0e383d39a80a5b425add1fce78058275256e2cc69166e790e0701b8e64d14931d3537947eae7026db61d549d01578f0bd83b5d90506262cd2dcebb0fbfa630df9b1119bbd0593625cca14efedf21787ad562fc6e0ecaf20390a41aaac8505dea3d97c1ab46f7fa865521b57927"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}]}], {0x14}}, 0x450}, 0x1, 0x0, 0x0, 0x11}, 0x4000084) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) [ 569.376410][T13796] CPU: 0 PID: 13796 Comm: syz-executor.4 Not tainted 5.18.0-syzkaller-11972-gd1dc87763f40 #0 [ 569.376439][T13796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 02:11:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) r2 = syz_open_dev$audion(&(0x7f0000000000), 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x2, 0x6, 0x201, 0x0, 0x0, {0xd, 0x0, 0x4}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000004}, 0x24004001) [ 569.376455][T13796] Call Trace: 02:11:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) [ 569.376461][T13796] [ 569.376471][T13796] dump_stack_lvl+0xcd/0x134 [ 569.376505][T13796] should_fail.cold+0x5/0xa [ 569.376542][T13796] _copy_to_user+0x2a/0x140 [ 569.376571][T13796] simple_read_from_buffer+0xcc/0x160 [ 569.376609][T13796] proc_fail_nth_read+0x187/0x220 [ 569.376644][T13796] ? proc_exe_link+0x1d0/0x1d0 [ 569.376675][T13796] ? security_file_permission+0xab/0xd0 [ 569.376712][T13796] ? proc_exe_link+0x1d0/0x1d0 [ 569.376743][T13796] vfs_read+0x1ef/0x5d0 [ 569.376778][T13796] ksys_read+0x127/0x250 [ 569.376806][T13796] ? vfs_write+0xac0/0xac0 [ 569.376834][T13796] ? syscall_enter_from_user_mode+0x21/0x70 [ 569.376869][T13796] ? syscall_enter_from_user_mode+0x21/0x70 [ 569.376908][T13796] do_syscall_64+0x35/0xb0 [ 569.376935][T13796] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 569.376963][T13796] RIP: 0033:0x7f6ba243bcbc 02:11:33 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10c80, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x41) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) [ 569.376987][T13796] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 569.377011][T13796] RSP: 002b:00007f6ba3653160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 569.377036][T13796] RAX: ffffffffffffffda RBX: 00007f6ba259c030 RCX: 00007f6ba243bcbc [ 569.377053][T13796] RDX: 000000000000000f RSI: 00007f6ba36531e0 RDI: 0000000000000006 [ 569.377069][T13796] RBP: 00007f6ba36531d0 R08: 0000000000000000 R09: 0000000000000000 [ 569.377085][T13796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.377100][T13796] R13: 00007f6ba2acfb1f R14: 00007f6ba3653300 R15: 0000000000022000 [ 569.377136][T13796] 02:11:34 executing program 0: prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r1 = dup(r0) (async) syz_clone3(&(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, {0x35}, &(0x7f0000000340)=""/164, 0xa4, &(0x7f0000000400)=""/70, &(0x7f00000024c0)}, 0x58) write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c) (async) r2 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r2, &(0x7f000047b000)={0xa, 0x404e20, 0x0, @empty}, 0x1c) (async) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r1, 0xc0502100, &(0x7f00000001c0)) process_vm_writev(0x0, &(0x7f0000001b80)=[{&(0x7f0000001a40)=""/38, 0x26}, {&(0x7f0000001a80)=""/248, 0xf8}], 0x2, &(0x7f0000c22fa0)=[{&(0x7f0000000080)=""/1, 0x1}], 0x1, 0x0) (async) r3 = socket$bt_hidp(0x1f, 0x3, 0x6) listen(r3, 0x560f1bd9) r4 = getpid() process_vm_readv(r4, &(0x7f0000000140)=[{&(0x7f0000000240)=""/208, 0xd0}, {&(0x7f0000000100)=""/27, 0x1b}, {&(0x7f0000000480)=""/240, 0xf0}, {&(0x7f0000000580)=""/148, 0x94}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/210, 0xd2}, {&(0x7f0000001740)=""/155, 0x9b}], 0x7, &(0x7f0000001a00)=[{&(0x7f0000001800)=""/218, 0xda}, {&(0x7f0000001900)=""/49, 0x31}, {&(0x7f0000001940)=""/147, 0x93}], 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) (async) r6 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000003d40)=[{{0x0, 0xffffffbf, 0x0, 0x0, 0x0, 0x0, 0xe}, 0x10}], 0x4000000000000d0, 0x0) 02:11:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_DELSETELEM={0x1d5c, 0xe, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1d10, 0x3, 0x0, 0x1, [{0x4}, {0x104, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x100, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @range={{0xa}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x38, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x17}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0x10, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x4}}}, {0x38, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x43}, @NFTA_NAT_REG_PROTO_MAX={0x8, 0x6, 0x1, 0x0, 0x9}, @NFTA_NAT_REG_ADDR_MAX={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x26}]}}}, {0x10, 0x1, 0x0, 0x1, @counter={{0xc}, @void}}, {0x10, 0x1, 0x0, 0x1, @redir={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}]}]}, {0x184, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x164, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3f}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9c}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x10001}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x2c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff8cb4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}]}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x2bc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x90, 0xb, 0x0, 0x1, [{0x58, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x4c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x4}, @NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_RT_KEY={0x8}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}]}}}, {0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x1c, 0x1, 0x0, 0x1, @reject={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_REJECT_TYPE={0x8, 0x1, 0x1, 0x0, 0x1}]}}}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x9}, @NFTA_SET_ELEM_KEY_END={0x1ec, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0xf6, 0x1, "277731cb13e1f4f1f9d122a4a929bffef0a06188e02a8121f4aa8f32c83af90a3919eb68dde8c2625a9b27d267286c6b6c5bcb695df45ec5e8795cbac2c6b0399ab8814bf8599f54865a1ab5ee2b61fbf5da7e3cf9a695c2ebd88331ec5e2dde2882941e38182e8bed21f3f4a7062e5435cf98eb0b31b43206a1ce17fafa49af02c452e35eb8f0913e6b99d2eb3b719148d6fe9fc0b76975a1265ea83aa094e9e0a10757f945aaa3786d5e51f0c8348ff7ded1396eb0ef2b89a8cfc72f436d2ab72cc49e837a27a1763ce8140535009663c26ddb31f7cd4c3e486e7964e43b5e4f0285b76715c0553d7cad09fa34adc63f81"}, @NFTA_DATA_VALUE={0xf0, 0x1, "88c37d33cd36065f779eb3444f5d34107f0170ba3ba29ad28db376cf88539567d65f5ce26260d974f2dedaae9c885bda0762a4eeaa5eaf0129e0eb006c824ac36175693725d587ebe026eee60fc8299fb8c9279cef7d72bed32264aa37655c17560837b0e5f5efaa32cb722042ccd08ba289d7c61acaab739a5c272a95f15199806a7821bf3bf7fb3bf95dbed0db9263cc80ccf3d04d56f761bbf5578b8f0d1412843ebdc106d6a9bda52e9248bea0f7217ff00a82d3b0e67550e6625fb419d9a9a88b21e0089ae0c2fc3aa82af41a0f5525f9826fa953d9c9362e93345912c9797f20c0e246be08943710ff"}]}, @NFTA_SET_ELEM_USERDATA={0x21, 0x6, 0x1, 0x0, "51fe0a529fa3e55d61bdb1a3c01fea27593b96eb77c348b14d38c6e392"}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}]}, {0x17c0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x30c, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x7fffffff}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VALUE={0x7d, 0x1, "89a9fd3118bdcf768e67c3f4c7a65b32d416037b824b9066df7c43e0b623e5b1e07235f36f993504ee788b2b5756e978ace1daa5f4df4a9353524bc3eec43532bca00014d5e58d85c404125753ab35a83ddf4a2ba763570762bab22fa07bdc283b8fb98187f1b0e307eeb02ae4946f2c392ce92302cb833ce2"}, @NFTA_DATA_VALUE={0xd3, 0x1, "a4b1dd69afb2d9680a6f1f7a8e4007fa9c9d33270f5dd0b05be845d9de2620b1233df37db959559e1c198c4b25ea513412510cfc53d707de92d6d0b731a0a516d1b08c97b23bdeab59f69c2b0804361e011210b25ce93274bcb131f9a178c26fb359c0915e333429f79f4e57282ba86e9f514b5874abb813603887d48f658e18ad4794835f61951e8be8f9314bfc850b818384deaaf8583eac20201e8ae05069d865a24c0adafaea44ab2ed978f03624556b1b14cfc5fc4cacd377cb21932db5455b0f41b419e6be2442f0daa69ef5"}, @NFTA_DATA_VALUE={0xb4, 0x1, "16fec5798631875c1ab5219edf62b5d217888945ed7282dcce594404c52a0c2b3f5a14148d3e530d413a9ca6dd1f22d8cd3497f55c25f309682315a76acca714234d3590350410cc27c17172be5c6f1e0b99c90d19b9216c42f3a17e160d41d3b0ba109374a41c593afcd572cf1312d2fc95ad0c251f8f5729c22406db325f4898b12f92bb565144e1aedfaa22f3194d3dab2fae65db2614b1cde76835c869e537fd6a578bd4a76af2a4278e60349116"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x6e, 0x1, "a465e68169b434c170465aeffca0462a6babdd1941e3cf01f5d26d5650c4e2fa2755acc8070efbb522acb80baaa7736b78df316921b85aa289968f1bf0d2fbe5e47e1187d01e175040cd972335726fb0831e98166de57553e04a254e0376e7f5b4e3dd371ea7ee69c130"}, @NFTA_DATA_VALUE={0x28, 0x1, "76fa1d7cc5755f038d196aaa632ab34887b8c417b818c8ea47a8e9e2ce9e55d1476be07c"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_KEY_END={0x2c, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x25, 0x1, "01bc9fb136e4914cdc4a7cde4a02761ded0717f43eba4d3562f1255cb281c23ad5"}]}, @NFTA_SET_ELEM_KEY_END={0x12b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x9e, 0x1, "5c88681d5ad2c6f51732537c94a946f63b17225f150d2b5e9c4e5f261ba1583a1e07c74cb5a08033ef74e518c0773bbbb9b3dffc31069b0379d5e3b41847c5b6d053dc22351992295d25f5a9087f427a67dd731cefaaff49711893a940f3f23462c9906eab919674ffd4069e6c4f4c9801edb83208ec99979ba9436f240976408bcae2781221337a583afdd818700e57c86cddfd763d0bda224e"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0xff, 0x1, "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"}, @NFTA_DATA_VALUE={0xd7, 0x1, "61c35347ad7ae1c95b0ba3103edff87132f7485a95cc480edf9ad0d9fa25a9b9320f7bc1c48791bff2bc5dda9d1f7496613b2214caba55761e33ff2dbc07ec050d012964b828b994a74f68a2ac3c4c7e86d7d32eef021dcc590aa9bcd377f32e0ff01c93f4a99544267675a345fcdc86e238240c8513712763553a2c159cfaf8f4cf6a6b0d4392281d73eabbea3f3d1caf26c907cc5bbe58b02dedc85ee98ec29257014089c7addb4cb93152553806cc574ffface07454ab3b301801790834f0e23fd0a6de54d546ca544609f8a77743b0486e"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x28, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8001}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xdba8}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xf95}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x300}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0x6}, @NFTA_SET_ELEM_DATA={0x198, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x6}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x40, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0xe8, 0x1, "5476f1e22c2f9d3561bc9ae17944243b5f838f75f94cfa64524907091862655d0e119915c7d73f93ddd3d90b2b9578c27f7e0844d734900a881000d9afe80428732e727962535cb265d065069a07c1c0cc7d6d7a3395338c9f2e62955baf6c1f72d12e3cfa8a2f5d1aedc5389e32d077a0e328c6d7dceee23206661e4b7f7fe185d07802efd60be1ea96777abbcc8db7f5bca541c51fad795b684ab173cc8ed17d796939c4e65a30b8c20a0147bac6e467ce011f957c9a3162a50a16ce4559019b2b0fa91274d128cb0411030728d10cd00fb83ae2e021988cabb8e5b09df5eb30f7695b"}, @NFTA_DATA_VALUE={0x50, 0x1, "d32499a40ad3255e9028e7e2cfdbc861e604bb3233bac5a90edcb5a76f4c8c476a9088d8a33e0288751f9e331ca24362e5fe9aa1feb8e2afec3222369879eb2a1c35f81b7f32b619bb55e93f"}]}]}, {0x4}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELRULE={0x2c4, 0x8, 0xa, 0x402, 0x0, 0x0, {0x5}, [@NFTA_RULE_COMPAT={0x2c, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x80f3}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x809b}, @NFTA_RULE_COMPAT_FLAGS={0x8}, @NFTA_RULE_COMPAT_PROTO_BRIDGE={0x8, 0x1, 0x1, 0x0, 0x8100}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @flow_offload={{0x11}, @void}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_USERDATA={0xa7, 0x7, 0x1, 0x0, "d646db1edb5ed3052c5cbaf27f902686eaede8b587fb8e6672ce59c88d6844db154151d1248e4b121ffc39059c4912449b853d30276c0f0e97e95a1ff396c814bac668b369060a4d0a9221977c65871baa6bbffcad688e8d0d862faa1d5b8818f5405f6d775f4f0bde14c5671688d6e2dfa4f6c1287399eb447128635f0408e1660812bc76ea7e2db60d92cb16ed04b52ef5f7bd6143f20507787b0cd51cd9e5c59b10"}, @NFTA_RULE_EXPRESSIONS={0x10c, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @byteorder={{0xe}, @void}}, {0x40, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xe}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0x30, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xe}]}}}, {0xc, 0x1, 0x0, 0x1, @dup_ipv6={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @socket={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_SOCKET_LEVEL={0x8, 0x3, 0xe7}, @NFTA_SOCKET_KEY={0x8}, @NFTA_SOCKET_KEY={0x8, 0x1, 0x1, 0x0, 0x1}]}}}, {0xc, 0x1, 0x0, 0x1, @rt={{0x7}, @void}}]}, @NFTA_RULE_USERDATA={0xa2, 0x7, 0x1, 0x0, "7ebfe981ce44b56dc07bc8c323168c8b64c8f8072aff64a938179d49c9eacf7711f740b05513f1fba959a0d7970dd9c34fb778c82b4dfacb9691be9ec6984719c5b5377dedc5f81155207928c0bfc3072e0148b977562e760fc22dbe481b2d50a508f945dfbf03aeadb81729a917be35fc17f79be9640c0dedeef9dc0900db410a6bf181efff65f182f33148598e03e54275bdf72194fbce60463d9006dd"}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x7ff}]}], {0x14}}, 0x2048}, 0x1, 0x0, 0x0, 0x2040800}, 0x40) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_DELOBJ={0x104, 0x14, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x3}, @NFTA_OBJ_USERDATA={0x86, 0x8, "dd59c48adb51a0bbac4d3889a90f0d4683b9709705b4eceb96d68906d88ccf34563f4bc81506d9c2ff3d3770ff3b54acc04ac3a299d614e3cfb1a185d64493911fc7f75259c463176fc0a38779c526d309f6b4612cdd8e1732664d13ff68dac29a0b0397d602e78b80a139632328041bb56f878c0d8396163fb24ca70573593491a2"}, @NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}]}, @NFT_MSG_DELRULE={0x10c, 0x8, 0xa, 0x301, 0x0, 0x0, {0xc, 0x0, 0xa}, [@NFTA_RULE_COMPAT={0x4}, @NFTA_RULE_USERDATA={0xd3, 0x7, 0x1, 0x0, "6fa3fbbe35574d29d705a69133e95a751fa2048eb4accd948b3d29eeda168b8a5be6dbe21799f9e45e7bc28a5f569798fca614c241061eb6359dae9d221c4c3a46db5b2dd6d5189963619454a6a7565e723b50ec4660f28a417a11c3b16a650ee078d3375be4751d2f0aa19f31d296ee5b7368deea7356fa6133a4f4d944045df9bc619ffc39fb22d2fb93f31d1765905753b62b7b12ccaec88cb94aff0a6e3acfeb4b0af152c47e0072c1b4328e5a57a8b254015906baac9e14747971b35cb450f50f7afdb5a7ae21f89ecaa0133f"}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWTABLE={0xf4, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_USERDATA={0x62, 0x6, "e17d4743e007e1ff4773c1f50d28e75f3e06ddb9dcda156f53e5f9c65fafe147d73fd22596d00b7080d3355238551eb1ac91f8148d7a7154e0b918c3c584e5a4ed0ef4abba9dcdce613a43660e79d581ded663ee21ba3d2afe54caf002b3"}, @NFTA_TABLE_USERDATA={0x79, 0x6, "4bcc210e7443197e0e383d39a80a5b425add1fce78058275256e2cc69166e790e0701b8e64d14931d3537947eae7026db61d549d01578f0bd83b5d90506262cd2dcebb0fbfa630df9b1119bbd0593625cca14efedf21787ad562fc6e0ecaf20390a41aaac8505dea3d97c1ab46f7fa865521b57927"}]}, @NFT_MSG_DELFLOWTABLE={0x20, 0x18, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0xd0, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x5}, @NFTA_FLOWTABLE_HOOK={0xa8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_macvtap\x00'}, {0x14, 0x1, 'lo\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'veth1_to_bridge\x00'}, {0x14, 0x1, 'veth0_virt_wifi\x00'}, {0x14, 0x1, 'macvlan0\x00'}, {0x14, 0x1, 'vlan0\x00'}, {0x14, 0x1, 'netpci0\x00'}]}]}]}], {0x14}}, 0x450}, 0x1, 0x0, 0x0, 0x11}, 0x4000084) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x2e4f, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) truncate(0x0, 0x4) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x7000000) 02:11:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_io_uring_setup(0x187, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x369}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000634000/0x2000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_FSYNC={0x3, 0x2, 0x0, @fd_index}, 0x0) io_uring_enter(r2, 0x0, 0x4, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x11) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000280)) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, 0x0) truncate(0x0, 0x40000000000005) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x44, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 02:11:34 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000), 0x10c80, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x0, 0x0, 0x0, {0x1, 0x0, 0x5}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40000c4}, 0x41) (async) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:34 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000080)={0x10, 0x0, 0x25dfdc00, 0x4804100}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) 02:11:34 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x103, 0x0, @dev, 0x6}, 0x1c) [ 570.313542][T13843] ================================================================================ [ 570.313555][T13843] UBSAN: array-index-out-of-bounds in net/netfilter/nfnetlink.c:697:28 [ 570.313555][T13843] UBSAN: array-index-out-of-bounds in net/netfilter/nfnetlink.c:697:28 [ 570.313575][T13843] index 15 is out of range for type 'int [10]' [ 570.313585][T13843] CPU: 1 PID: 13843 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-11972-gd1dc87763f40 #0 [ 570.313610][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.313623][T13843] Call Trace: [ 570.313629][T13843] [ 570.313640][T13843] dump_stack_lvl+0xcd/0x134 [ 570.313672][T13843] ubsan_epilogue+0xb/0x50 [ 570.313695][T13843] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 570.313722][T13843] ? __local_bh_enable_ip+0xa0/0x120 [ 570.313786][T13843] ? __local_bh_enable_ip+0xa0/0x120 [ 570.313812][T13843] nfnetlink_unbind+0x38c/0x3b0 [ 570.313917][T13843] netlink_release+0xa8f/0x1db0 [ 570.313979][T13843] ? netlink_setsockopt+0xda0/0xda0 [ 570.314007][T13843] ? down_write_killable+0x170/0x170 [ 570.314034][T13843] ? locks_remove_file+0x2f7/0x570 [ 570.314063][T13843] ? fcntl_setlk+0xcf0/0xcf0 [ 570.314091][T13843] __sock_release+0xcd/0x280 [ 570.314123][T13843] sock_close+0x18/0x20 [ 570.314147][T13843] __fput+0x277/0x9d0 [ 570.314168][T13843] ? __sock_release+0x280/0x280 [ 570.314202][T13843] task_work_run+0xdd/0x1a0 [ 570.314289][T13843] exit_to_user_mode_prepare+0x23c/0x250 [ 570.314340][T13843] syscall_exit_to_user_mode+0x19/0x50 [ 570.314371][T13843] do_syscall_64+0x42/0xb0 [ 570.314397][T13843] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 570.314423][T13843] RIP: 0033:0x7f0a09a3bd4b [ 570.314443][T13843] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 570.314464][T13843] RSP: 002b:00007f0a0a0cfb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 570.314488][T13843] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f0a09a3bd4b [ 570.314502][T13843] RDX: 00007f0a09ba0398 RSI: ffffffffffffffff RDI: 0000000000000003 [ 570.314518][T13843] RBP: 00007f0a09b9d960 R08: 0000000000000000 R09: 00007f0a09ba03a0 [ 570.314533][T13843] R10: 00007f0a0a0cfc80 R11: 0000000000000293 R12: 000000000008b3a6 [ 570.314548][T13843] R13: 00007f0a0a0cfc80 R14: 00007f0a09b9bf60 R15: 0000000000000032 [ 570.314582][T13843] [ 570.336122][T13843] ================================================================================ [ 570.336135][T13843] Kernel panic - not syncing: panic_on_warn set ... [ 570.336221][T13843] CPU: 1 PID: 13843 Comm: syz-executor.1 Not tainted 5.18.0-syzkaller-11972-gd1dc87763f40 #0 [ 570.336251][T13843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 570.336266][T13843] Call Trace: [ 570.336274][T13843] [ 570.336285][T13843] dump_stack_lvl+0xcd/0x134 [ 570.336319][T13843] panic+0x2d7/0x636 [ 570.336381][T13843] ? panic_print_sys_info.part.0+0x10b/0x10b [ 570.336422][T13843] ? ubsan_epilogue+0x3e/0x50 [ 570.336454][T13843] ? nfnetlink_net_init+0x390/0x390 [ 570.336484][T13843] ubsan_epilogue+0x4a/0x50 [ 570.336509][T13843] __ubsan_handle_out_of_bounds.cold+0x62/0x6c [ 570.336539][T13843] ? __local_bh_enable_ip+0xa0/0x120 [ 570.336568][T13843] ? __local_bh_enable_ip+0xa0/0x120 [ 570.336596][T13843] nfnetlink_unbind+0x38c/0x3b0 [ 570.336627][T13843] netlink_release+0xa8f/0x1db0 [ 570.336671][T13843] ? netlink_setsockopt+0xda0/0xda0 [ 570.336702][T13843] ? down_write_killable+0x170/0x170 [ 570.336738][T13843] ? locks_remove_file+0x2f7/0x570 [ 570.336769][T13843] ? fcntl_setlk+0xcf0/0xcf0 [ 570.336800][T13843] __sock_release+0xcd/0x280 [ 570.336835][T13843] sock_close+0x18/0x20 [ 570.336864][T13843] __fput+0x277/0x9d0 [ 570.336888][T13843] ? __sock_release+0x280/0x280 [ 570.336926][T13843] task_work_run+0xdd/0x1a0 [ 570.336961][T13843] exit_to_user_mode_prepare+0x23c/0x250 [ 570.336992][T13843] syscall_exit_to_user_mode+0x19/0x50 [ 570.337024][T13843] do_syscall_64+0x42/0xb0 [ 570.337050][T13843] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 570.337077][T13843] RIP: 0033:0x7f0a09a3bd4b [ 570.337099][T13843] Code: 0f 05 48 3d 00 f0 ff ff 77 45 c3 0f 1f 40 00 48 83 ec 18 89 7c 24 0c e8 63 fc ff ff 8b 7c 24 0c 41 89 c0 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 44 89 c7 89 44 24 0c e8 a1 fc ff ff 8b 44 [ 570.337124][T13843] RSP: 002b:00007f0a0a0cfb80 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 570.337152][T13843] RAX: 0000000000000000 RBX: 0000000000000004 RCX: 00007f0a09a3bd4b [ 570.337170][T13843] RDX: 00007f0a09ba0398 RSI: ffffffffffffffff RDI: 0000000000000003 [ 570.337188][T13843] RBP: 00007f0a09b9d960 R08: 0000000000000000 R09: 00007f0a09ba03a0 [ 570.337206][T13843] R10: 00007f0a0a0cfc80 R11: 0000000000000293 R12: 000000000008b3a6 [ 570.337223][T13843] R13: 00007f0a0a0cfc80 R14: 00007f0a09b9bf60 R15: 0000000000000032 [ 570.337258][T13843] [ 570.337653][T13843] Kernel Offset: disabled