oup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:18 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x30, 0x0, 0x0, 0x0)

08:55:18 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0, &(0x7f0000000040)=<r2=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:19 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1f00, 0x0, 0x0, 0x0)

08:55:19 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0, &(0x7f0000000040)=<r2=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(0x0, r2, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:19 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2000, 0x0, 0x0, 0x0)

08:55:19 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x600, 0x0, 0x0, 0x0)

08:55:19 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:19 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2400, 0x0, 0x0, 0x0)

08:55:19 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:19 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x36, 0x0, 0x0, 0x0)

08:55:20 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x44040000)

08:55:20 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:20 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2a00, 0x0, 0x0, 0x0)

08:55:20 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x700, 0x0, 0x0, 0x0)

08:55:20 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:20 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3000, 0x0, 0x0, 0x0)

08:55:20 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:21 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:21 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3600, 0x0, 0x0, 0x0)

08:55:21 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3c, 0x0, 0x0, 0x0)

08:55:21 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xbc7, 0x0, 0x0, 0x0)

08:55:21 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3c00, 0x0, 0x0, 0x0)

08:55:22 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x46040000)

08:55:22 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:22 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3f00, 0x0, 0x0, 0x0)

08:55:22 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:22 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf0, 0x0, 0x0, 0x0)

08:55:22 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x8311, 0x0, 0x0, 0x0)

08:55:22 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc00, 0x0, 0x0, 0x0)

08:55:22 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:22 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb503, 0x0, 0x0, 0x0)

08:55:23 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:23 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:23 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb710, 0x0, 0x0, 0x0)

08:55:23 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x48110000)

08:55:23 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3c8, 0x0, 0x0, 0x0)

08:55:23 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:23 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb903, 0x0, 0x0, 0x0)

08:55:24 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd60, 0x0, 0x0, 0x0)

08:55:24 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:24 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xbb03, 0x0, 0x0, 0x0)

08:55:24 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fc"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:24 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3c9, 0x0, 0x0, 0x0)

08:55:24 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:24 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xbf10, 0x0, 0x0, 0x0)

08:55:24 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:25 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x49040000)

08:55:25 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc103, 0x0, 0x0, 0x0)

08:55:25 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd66, 0x0, 0x0, 0x0)

08:55:25 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:25 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x500, 0x0, 0x0, 0x0)

08:55:25 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fc"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:25 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc512, 0x0, 0x0, 0x0)

08:55:25 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:26 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:26 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xdc0b, 0x0, 0x0, 0x0)

08:55:26 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, 0x0, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:26 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fc"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:27 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4b040000)

08:55:27 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x5af, 0x0, 0x0, 0x0)

08:55:27 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd6b, 0x0, 0x0, 0x0)

08:55:27 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xe40b, 0x0, 0x0, 0x0)

08:55:27 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:27 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:27 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xea0b, 0x0, 0x0, 0x0)

08:55:27 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d8"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:27 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf000, 0x0, 0x0, 0x0)

08:55:27 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:27 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf00b, 0x0, 0x0, 0x0)

08:55:28 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:28 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x4e040000)

08:55:28 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf20b, 0x0, 0x0, 0x0)

08:55:28 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd6f, 0x0, 0x0, 0x0)

08:55:28 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x5b4, 0x0, 0x0, 0x0)

08:55:28 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:28 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:29 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf70b, 0x0, 0x0, 0x0)

08:55:29 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:29 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xfb0b, 0x0, 0x0, 0x0)

08:55:29 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xfd0b, 0x0, 0x0, 0x0)

08:55:29 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:29 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:30 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd82, 0x0, 0x0, 0x0)

08:55:30 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x5ba, 0x0, 0x0, 0x0)

08:55:30 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x20000, 0x0, 0x0, 0x0)

08:55:30 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:30 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x52040000)

08:55:30 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf0ffff, 0x0, 0x0, 0x0)

08:55:30 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:30 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x5bd, 0x0, 0x0, 0x0)

08:55:30 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:31 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1000000, 0x0, 0x0, 0x0)

08:55:31 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:31 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1200, 0x0, 0x0, 0x0)

08:55:31 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2000000, 0x0, 0x0, 0x0)

08:55:31 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:31 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x4000000, 0x0, 0x0, 0x0)

08:55:32 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x5c9, 0x0, 0x0, 0x0)

08:55:32 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x5000000, 0x0, 0x0, 0x0)

08:55:32 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x55040000)

08:55:32 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x6000000, 0x0, 0x0, 0x0)

08:55:32 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1291, 0x0, 0x0, 0x0)

08:55:32 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:33 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x8000000, 0x0, 0x0, 0x0)

08:55:33 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:33 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x5d1, 0x0, 0x0, 0x0)

08:55:33 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc000000, 0x0, 0x0, 0x0)

08:55:33 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x12000000, 0x0, 0x0, 0x0)

08:55:33 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:34 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x12b3, 0x0, 0x0, 0x0)

08:55:34 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x18000000, 0x0, 0x0, 0x0)

08:55:34 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x55110000)

08:55:34 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1e000000, 0x0, 0x0, 0x0)

08:55:34 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1f000000, 0x0, 0x0, 0x0)

08:55:35 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x20000000, 0x0, 0x0, 0x0)

08:55:35 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x600, 0x0, 0x0, 0x0)

08:55:35 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, r5, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:35 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:35 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x12ed, 0x0, 0x0, 0x0)

08:55:35 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x24000000, 0x0, 0x0, 0x0)

08:55:35 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2a000000, 0x0, 0x0, 0x0)

[ 1673.673119][ T1213] ieee802154 phy0 wpan0: encryption failed: -22
[ 1673.679587][ T1213] ieee802154 phy1 wpan1: encryption failed: -22
08:55:36 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x700, 0x0, 0x0, 0x0)

08:55:36 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x30000000, 0x0, 0x0, 0x0)

08:55:36 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x58040000)

08:55:36 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:36 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x36000000, 0x0, 0x0, 0x0)

08:55:37 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1800, 0x0, 0x0, 0x0)

08:55:37 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3c000000, 0x0, 0x0, 0x0)

08:55:38 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:38 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3f000000, 0x0, 0x0, 0x0)

08:55:38 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc75537"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:38 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1e00, 0x0, 0x0, 0x0)

08:55:38 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x7bc, 0x0, 0x0, 0x0)

08:55:38 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5b040000)

08:55:38 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x83110000, 0x0, 0x0, 0x0)

08:55:38 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb5030000, 0x0, 0x0, 0x0)

08:55:39 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:39 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb7100000, 0x0, 0x0, 0x0)

08:55:39 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2000, 0x0, 0x0, 0x0)

08:55:39 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb9030000, 0x0, 0x0, 0x0)

08:55:40 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:40 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb9d, 0x0, 0x0, 0x0)

08:55:40 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xbb030000, 0x0, 0x0, 0x0)

08:55:40 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:40 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5b110000)

08:55:40 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xbf100000, 0x0, 0x0, 0x0)

08:55:40 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2400, 0x0, 0x0, 0x0)

08:55:40 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc1030000, 0x0, 0x0, 0x0)

08:55:41 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:41 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc00, 0x0, 0x0, 0x0)

08:55:41 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc5120000, 0x0, 0x0, 0x0)

08:55:41 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xdc0b0000, 0x0, 0x0, 0x0)

08:55:42 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:42 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xe40b0000, 0x0, 0x0, 0x0)

08:55:42 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2a00, 0x0, 0x0, 0x0)

08:55:42 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd27, 0x0, 0x0, 0x0)

08:55:42 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5c040000)

08:55:42 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:42 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xea0b0000, 0x0, 0x0, 0x0)

08:55:43 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf00b0000, 0x0, 0x0, 0x0)

08:55:43 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:43 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf20b0000, 0x0, 0x0, 0x0)

08:55:43 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1200, 0x0, 0x0, 0x0)

08:55:43 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3000, 0x0, 0x0, 0x0)

08:55:44 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00'})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:44 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf70b0000, 0x0, 0x0, 0x0)

08:55:44 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x5e110000)

08:55:44 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:44 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xfb0b0000, 0x0, 0x0, 0x0)

08:55:45 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3600, 0x0, 0x0, 0x0)

08:55:45 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x12d5, 0x0, 0x0, 0x0)

08:55:45 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xfd0b0000, 0x0, 0x0, 0x0)

08:55:45 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1800, 0x0, 0x0, 0x0)

08:55:45 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xfffff000, 0x0, 0x0, 0x0)

08:55:45 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:45 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xffffffff, 0x0, 0x0, 0x0)

08:55:46 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00'})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:46 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x63110000)

08:55:46 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x0)

08:55:46 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3c00, 0x0, 0x0, 0x0)

08:55:46 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1e00, 0x0, 0x0, 0x0)

08:55:47 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x2, 0x0, 0x0)

08:55:47 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:47 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x4, 0x0, 0x0)

08:55:47 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x5, 0x0, 0x0)

08:55:48 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x6, 0x0, 0x0)

08:55:48 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:48 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3f00, 0x0, 0x0, 0x0)

08:55:49 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00'})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:49 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x79110000)

08:55:49 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1f00, 0x0, 0x0, 0x0)

08:55:49 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x8, 0x0, 0x0)

08:55:49 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x600d, 0x0, 0x0, 0x0)

08:55:49 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:49 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xc, 0x0, 0x0)

08:55:50 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x12, 0x0, 0x0)

08:55:50 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:50 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x18, 0x0, 0x0)

08:55:50 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2000, 0x0, 0x0, 0x0)

08:55:50 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x660d, 0x0, 0x0, 0x0)

08:55:51 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1e, 0x0, 0x0)

08:55:51 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x7d110000)

08:55:51 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:51 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:51 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x24, 0x0, 0x0)

08:55:51 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x2a, 0x0, 0x0)

08:55:51 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:51 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x6b0d, 0x0, 0x0, 0x0)

08:55:51 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x30, 0x0, 0x0)

08:55:51 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2400, 0x0, 0x0, 0x0)

08:55:51 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:52 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x36, 0x0, 0x0)

08:55:52 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:52 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x7f000000)

08:55:52 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3c, 0x0, 0x0)

08:55:52 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:52 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:52 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x270d, 0x0, 0x0, 0x0)

08:55:52 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x6f0d, 0x0, 0x0, 0x0)

08:55:53 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf0, 0x0, 0x0)

08:55:53 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040), 0x0, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:53 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3b5, 0x0, 0x0)

08:55:53 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:53 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3b9, 0x0, 0x0)

08:55:53 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:54 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x8c030000)

08:55:54 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3bb, 0x0, 0x0)

08:55:54 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:54 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2a00, 0x0, 0x0, 0x0)

08:55:54 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:54 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x7f00, 0x0, 0x0, 0x0)

08:55:54 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3c1, 0x0, 0x0)

08:55:54 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:54 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x96110000)

08:55:54 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x500, 0x0, 0x0)

08:55:54 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:54 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x600, 0x0, 0x0)

08:55:55 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:55 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbdc, 0x0, 0x0)

08:55:55 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:55 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3000, 0x0, 0x0, 0x0)

08:55:55 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x820d, 0x0, 0x0, 0x0)

08:55:55 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbe4, 0x0, 0x0)

08:55:55 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbea, 0x0, 0x0)

08:55:55 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbf0, 0x0, 0x0)

08:55:56 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x98030000)

08:55:56 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbf2, 0x0, 0x0)

08:55:56 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:56 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3600, 0x0, 0x0, 0x0)

08:55:57 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbf7, 0x0, 0x0)

08:55:57 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x9112, 0x0, 0x0, 0x0)

08:55:57 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x0, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:57 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3c00, 0x0, 0x0, 0x0)

08:55:57 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbfb, 0x0, 0x0)

08:55:57 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:57 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbfd, 0x0, 0x0)

08:55:57 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x0, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:58 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x99110000)

08:55:58 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xc00, 0x0, 0x0)

08:55:58 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x0, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:58 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x10b7, 0x0, 0x0)

08:55:58 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x0, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:58 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb312, 0x0, 0x0, 0x0)

08:55:58 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x10bf, 0x0, 0x0)

08:55:58 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3f00, 0x0, 0x0, 0x0)

08:55:58 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:58 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x0, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:55:58 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1183, 0x0, 0x0)

08:55:59 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1200, 0x0, 0x0)

08:56:00 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x9f030000)

08:56:00 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x0, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:00 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x12c5, 0x0, 0x0)

08:56:00 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc70b, 0x0, 0x0, 0x0)

08:56:00 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:00 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x7f00, 0x0, 0x0, 0x0)

08:56:00 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1800, 0x0, 0x0)

08:56:00 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd003, 0x0, 0x0, 0x0)

08:56:00 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1e00, 0x0, 0x0)

08:56:00 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x0, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:00 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x9d0b, 0x0, 0x0, 0x0)

08:56:00 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1f00, 0x0, 0x0)

08:56:01 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xa9110000)

08:56:01 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x0, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:01 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x2000, 0x0, 0x0)

08:56:01 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:01 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xed12, 0x0, 0x0, 0x0)

08:56:01 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xaf05, 0x0, 0x0, 0x0)

08:56:01 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x2400, 0x0, 0x0)

08:56:01 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x0, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:01 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x2a00, 0x0, 0x0)

08:56:02 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3000, 0x0, 0x0)

08:56:02 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:02 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:03 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xb2110000)

08:56:03 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3600, 0x0, 0x0)

08:56:03 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb405, 0x0, 0x0, 0x0)

08:56:03 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf000, 0x0, 0x0, 0x0)

08:56:03 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:03 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3c00, 0x0, 0x0)

08:56:03 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x0, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:03 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:03 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3f00, 0x0, 0x0)

08:56:03 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x8311, 0x0, 0x0)

08:56:03 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xb503, 0x0, 0x0)

08:56:03 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xb710, 0x0, 0x0)

08:56:04 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xc2110000)

08:56:04 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:04 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xb903, 0x0, 0x0)

08:56:04 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xba05, 0x0, 0x0, 0x0)

08:56:04 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x20000, 0x0, 0x0, 0x0)

08:56:04 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:04 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbb03, 0x0, 0x0)

08:56:05 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbf10, 0x0, 0x0)

08:56:05 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:05 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xc103, 0x0, 0x0)

08:56:05 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf0ffff, 0x0, 0x0, 0x0)

08:56:05 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:06 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xc512, 0x0, 0x0)

08:56:06 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:06 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xbc07, 0x0, 0x0, 0x0)

08:56:06 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xfffff000)

08:56:06 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1000000, 0x0, 0x0, 0x0)

08:56:06 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xdc0b, 0x0, 0x0)

08:56:06 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xe40b, 0x0, 0x0)

08:56:06 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:06 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xea0b, 0x0, 0x0)

08:56:06 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:07 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf000, 0x0, 0x0)

08:56:07 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf00b, 0x0, 0x0)

08:56:07 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:07 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xbd05, 0x0, 0x0, 0x0)

08:56:07 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf20b, 0x0, 0x0)

08:56:08 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0xffffffff)

08:56:08 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2000000, 0x0, 0x0, 0x0)

08:56:08 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf70b, 0x0, 0x0)

08:56:08 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:08 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, 0x0, 0x0)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:08 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xfb0b, 0x0, 0x0)

08:56:08 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xfd0b, 0x0, 0x0)

08:56:08 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:08 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x20000, 0x0, 0x0)

08:56:08 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc803, 0x0, 0x0, 0x0)

08:56:08 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:08 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf0ffff, 0x0, 0x0)

08:56:09 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:09 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x5000000, 0x0, 0x0, 0x0)

08:56:09 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1000000, 0x0, 0x0)

08:56:09 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180), 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6}, 0x20)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:09 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x101000, 0x2, 0xa}, 0x18)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)={0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000200)={r6})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:09 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc903, 0x0, 0x0, 0x0)

08:56:09 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x2000000, 0x0, 0x0)

08:56:09 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:10 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x4000000, 0x0, 0x0)

08:56:10 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x5000000, 0x0, 0x0)

08:56:10 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:10 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:10 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x6000000, 0x0, 0x0)

08:56:10 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x6000000, 0x0, 0x0, 0x0)

08:56:10 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x8000000, 0x0, 0x0)

08:56:10 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc905, 0x0, 0x0, 0x0)

08:56:11 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0) (async)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x101000, 0x2, 0xa}, 0x18)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)={0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000200)={r6})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0) (async, rerun: 32)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (rerun: 32)

08:56:11 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:11 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xc000000, 0x0, 0x0)

08:56:11 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x7000000, 0x0, 0x0, 0x0)

08:56:11 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:11 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd105, 0x0, 0x0, 0x0)

08:56:11 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x12000000, 0x0, 0x0)

08:56:11 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:12 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x101000, 0x2, 0xa}, 0x18)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)={0x0, <r6=>0x0})
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000200)={r6})
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
socket$inet_tcp(0x2, 0x1, 0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
dup(r0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat2(r1, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x101000, 0x2, 0xa}, 0x18) (async)
ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f00000001c0)) (async)
ioctl$DRM_IOCTL_GEM_OPEN(r5, 0xc010640b, &(0x7f0000000200)={r6}) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
socket$inet_tcp(0x2, 0x1, 0x0) (async)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)

08:56:12 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x18000000, 0x0, 0x0)

08:56:12 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1e000000, 0x0, 0x0)

08:56:12 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:12 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc000000, 0x0, 0x0, 0x0)

08:56:12 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d69646929234423000000080000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:12 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd512, 0x0, 0x0, 0x0)

08:56:12 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1f000000, 0x0, 0x0)

08:56:13 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:13 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x20000000, 0x0, 0x0)

08:56:13 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x24000000, 0x0, 0x0)

08:56:13 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x2a000000, 0x0, 0x0)

08:56:13 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fallocate(r0, 0x44, 0x3, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:13 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x12000000, 0x0, 0x0, 0x0)

08:56:13 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x30000000, 0x0, 0x0)

08:56:13 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d69646929234423000000080000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:14 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x36000000, 0x0, 0x0)

08:56:14 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf000, 0x0, 0x0, 0x0)

08:56:14 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3c000000, 0x0, 0x0)

08:56:14 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3f000000, 0x0, 0x0)

08:56:15 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:15 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x83110000, 0x0, 0x0)

08:56:15 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x18000000, 0x0, 0x0, 0x0)

08:56:15 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYRES32=0xee01, @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d69646929234423000000080000", @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:15 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0) (async)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
fallocate(r0, 0x44, 0x3, 0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 64)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:15 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xb5030000, 0x0, 0x0)

08:56:15 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x20000, 0x0, 0x0, 0x0)

08:56:15 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:15 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1e000000, 0x0, 0x0, 0x0)

08:56:16 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xb7100000, 0x0, 0x0)

08:56:16 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:16 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xb9030000, 0x0, 0x0)

08:56:16 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:16 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbb030000, 0x0, 0x0)

08:56:16 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbf100000, 0x0, 0x0)

08:56:16 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:17 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
fallocate(r0, 0x44, 0x3, 0x8) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:17 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xc1030000, 0x0, 0x0)

08:56:17 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x20000000, 0x0, 0x0, 0x0)

08:56:17 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, 0x0, &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:17 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xf0ffff, 0x0, 0x0, 0x0)

08:56:17 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="4c050000000101032dbd7000fedbdf2507000000291e76d0b57176fb1b2bb61cb636418d068bf8ab5c8ddf8e492aa333d0ecd5272433ea66ca65f23a05bdbc60632cbb13cf10d3903781da428f42e2148958716fb97cf13587bb725d59cfa2ddbb865df2e132d3ace230c830824ea8473e3c2fb12ce7a353e0043621464784781f12c9739da171bcfb1e8f98afba44a943273efad1dd71037a8034d332208f7e5dc60f5796a5b7398024753df32c224af9cc8b458f30d81b7f97b02504f4d22047b79d9639d72956f4744ebf7acf3e142703966b83f31afaf1be7bc6b48be0ada0e1e6688ed7d11c7d101d45ba3e0f5768a8cc052f3a216709bdf6345cd03f6f897530098d8a548dc8d163a8c9fb11fb24b70a986f100cc48d496b17e157085b71f4e620ba70fdf3060ae3c92deceb8c11f3b52a290155a8e7b551bc530d18b95b60e2285ca6712298c6566d4ca7dede8fdd78d3ee86e583c0e7c91ea3c065ac16618efa9fb168b6e88082db2922e3855c559678995faf34971d9df9d29bc487cf55d8ebb11078c2ed2728cf036481423e21489852636ad543cf9d1000ff45edef543698b5dacc271fcee8b03b9884ac46763f45484e9f35397dc1c4f4bbd73ced675456510c48b4bb92b95bc21472011d02ba7f452dd8c0dcd104f375f8a8b09192a6b075576183a393fa8e48ff508523ebbd7405d15f67f40081ec5df4b4697d382c1dbaff4ba7486a104115ff0c75e6de1a03dc9ce4956e901bb1b25a14ae732907e5935ece3908003f00ff070000b999a43c56156ce20976c0b47ed67519e76567c811872e9f8df34f31c8d89c6f8050fdda2189dc81162bd9eff9909d3a949fdb90623217c53b2db8f3af94dd0fbbb76c0e288f25834ec084e31ffde802eb0da0824330b905a7c4e089957e5ea9aa46f4c32553aba009c21ce6c7785758825e59158fcc0fbcf5a7bbfefacbb11bd3548db47c75f97b87d88d5dc5fb15011fc066866620c4a9e925788ed8ea5bc42d45c746e2bd3ffeb63478e28f64b3732a9fe1c6da84a877f002015a0ae5dfa407bfa30f32b2f8fe81b1eecc0d32ec248d85fccfdd42bef41dc88f22add84ed735ccda5368c2576c3937f7b5f17f31674302d752da95edab9271d0aee3a0f120d74575653e51c93054d6e86166a96c9036d3ecc76df5104f16e5a35d9671569bdbbc685f56f8fbc4e99894385a96493196a10e6097f0d15199f9ac8985fc4bd3300bcc461182219b7f6921af6c96382ae5ce6b031240362c15a15d4cf0c8deeaa1db9e6e1a4ed53d5c3c3987bec7b2ac395450db45ddce9097fb19e80a6f761ec6af6e5e5ea47f7ca7da3a5cf17728eb054edb242e12a475862f60bf9dd17499523777998797114d47913d6c9d034f8e5f984528154186d189e38fa9a0627ed5797cb408007800", @ANYBLOB="0c0059000400000000000000234800160055002f6465762f736e642735075214d984ddee6d6964692923442300000008000000", @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:17 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xc5120000, 0x0, 0x0)

08:56:17 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:17 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xdc0b0000, 0x0, 0x0)

08:56:18 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:18 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xe40b0000, 0x0, 0x0)

08:56:18 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1000000, 0x0, 0x0, 0x0)

08:56:18 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x0, 0x1, 0x8}}, 0x14)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
r11 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r11, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r11, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r6, r10, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x401}, 0x2)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:18 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xea0b0000, 0x0, 0x0)

08:56:18 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="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", @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:18 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:18 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x24000000, 0x0, 0x0, 0x0)

08:56:18 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2000000, 0x0, 0x0, 0x0)

08:56:19 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf00b0000, 0x0, 0x0)

08:56:19 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x0, 0x1, 0x8}}, 0x14) (async)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed}) (async)
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0) (async)
r11 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r11, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed}) (async)
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r11, 0x0, 0x0}, 0x0) (async, rerun: 32)
syz_io_uring_submit(r6, r10, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x401}, 0x2) (async, rerun: 32)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:19 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:19 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf20b0000, 0x0, 0x0)

08:56:19 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf70b0000, 0x0, 0x0)

08:56:19 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
write$P9_RATTACH(r1, &(0x7f00000000c0)={0x14, 0x69, 0x2, {0x0, 0x1, 0x8}}, 0x14) (async)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0) (async)
r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=<r6=>0x0, &(0x7f0000000080)=<r7=>0x0)
r8 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r8, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r8, 0x0, 0x0}, 0x0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=<r9=>0x0, &(0x7f0000000080)=<r10=>0x0)
r11 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r11, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r11, 0x0, 0x0}, 0x0) (async)
syz_io_uring_submit(r6, r10, &(0x7f0000000140)=@IORING_OP_FALLOCATE={0x11, 0x1, 0x0, @fd=r5, 0x0, 0x0, 0x401}, 0x2) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:19 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r5=>r0}}, './file0\x00'})
recvfrom(r5, &(0x7f0000000140)=""/37, 0x25, 0x0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:19 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xfb0b0000, 0x0, 0x0)

08:56:19 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:19 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x4000000, 0x0, 0x0, 0x0)

08:56:20 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:20 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xfd0b0000, 0x0, 0x0)

08:56:20 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2a000000, 0x0, 0x0, 0x0)

08:56:20 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xfffff000, 0x0, 0x0)

08:56:20 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xffffffff, 0x0, 0x0)

08:56:20 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:20 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x0)

08:56:20 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:21 executing program 5:
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) (async)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r5=>r0}}, './file0\x00'})
recvfrom(r5, &(0x7f0000000140)=""/37, 0x25, 0x0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:21 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:21 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x2)

08:56:21 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x5000000, 0x0, 0x0, 0x0)

08:56:21 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:21 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x30000000, 0x0, 0x0, 0x0)

08:56:21 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x4)

08:56:21 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:22 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="000000000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:22 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x5)

08:56:22 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x6000000, 0x0, 0x0, 0x0)

08:56:22 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:23 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0) (async)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(r1, 0xc0189378, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r0, {<r5=>r0}}, './file0\x00'})
recvfrom(r5, &(0x7f0000000140)=""/37, 0x25, 0x0, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0x2711, @local}, 0x80) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:23 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x36000000, 0x0, 0x0, 0x0)

08:56:23 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="000000000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:23 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x6)

08:56:23 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:23 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x7000000, 0x0, 0x0, 0x0)

08:56:23 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="000000000000000095000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:23 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x8)

08:56:24 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:24 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xc)

08:56:24 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3c000000, 0x0, 0x0, 0x0)

08:56:24 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:25 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x7, 0x268503)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netlink\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000002080)={{r0}, "f2e8ec3fe6943b2753a74df3c1d890a0afaf6f78004e7a055bccf25e767b25b93f8734069b234fcae1cc7d28d4783d59d4be6b61ae35b6b9979f0eaf1144347939f6775154e25bfab9a3f4751fc9c70c476b2604340d4f33d89c41658594ac63f73ef59e964809900b732c38384ae92541e9c41d308e0ad0f5c33553a5ca0882f886188ab834cf056cfdc6c52777f277cd53e891701c646035d29b66a55c3d0217b5c8ff4ccb5089ac2dcdf65bc9e6210f9c675c4604977b58a77e7a6e135c896a2b0c7339179b704a03794d1295a7657825aa6aaff71d95801511f5fb3c8cd71380af4db05072d158b0010b9feed3ed5da1a303e66de3368ea0f745abcde1d5521d57c71eab896e08a8c609d4b8fdf89fd4ed8ea059de63b694e62faecda1c1463778e2ec31de536bb76cbb6b410fdddcb9f62ef2248caf61811d7aa403fbbf16c06bd154d31462d1bab7f6b962a75e3650aed05d19188c55212919bfe8e15268ee28bc6c2f6d01ffa0fdf95d277590eeb4201b07db6cbb191e44bc4073bbd8712629e4c7af76bfcf564c1b6d14ee84c65ab3a01d5e95d3d008743b4299ece8a6b21dee36e17b05e4c5fc4dc171c9b4f6a4f88e2f14b8dcbd487aeba28302bb24710b0ea07a3fff80a366f24b3f897bdbb4b8b04aa0cb834512337a388bb793ba3cfde9258d39311aa5eb3f987b0a7e7ac61ee29ee420a822f342257e33316c68b4656a20637e2377b1d2c146ad0bc381db4185d8c5a16a8b1ee42c6b39442f105ae6c5b7c6dd80b7d73a142886163fe0fa2769f327fb917132d55620f3367ce86aae992e1a213629ed290d804b3cfb870e580bd2625df6e452bb65cd59b79a462390946498416c33a315eaf250889001d767290ae635c9cef2ff737482e0b41823bbbb3f56a54e88974718347ecc9096dc88d71a7d680e5fde065e5fa18d287a3dac078379584f76c57e93050aa53454ccb751fc851554a2262b81e26dd5c1f3eb438fd639a4c44fe980b2358ca944a4e88f3b9caa4a35c3b6f70cbc54c28101f33f71e419a537810cd75af12a0284e7a2ce6e0689ee6f04b60c909cd57d213443c56aadee6eccd6efe99dee65544109cf11ab6eb7ded7cbf52b41d5a23775ee8d4f7a9d7335eb6e056bf6c1139fbc55bbc595bdd45b5d96c9cd3651b55d2ac09047d7b966f95441723e7544f4e0941e8c6d95071250b0d62133d5da62208e18dfd676b65bd1659eab5b8f1dcb52576e34b131ed43fcf8001ad3c4b89311cfc87ab9535ae939a0813aad6ab58360bd6e0e51addfcb0507cfa512eb1c303de35001addcab2ee03ac816d4bfc107ffc379290e09219c06ae71a0de3d7be65c0e227c8823816a8714f49f1f88a857fec37613064b6b43f4bee394a6c126f1641a6bcdcd56eb136a1a8b10d16420aad888dcb5945dcf7aec7640f5471af3de13a8370491044f818fd3350003cd01658a73c62dd2f57f66ca2b1550db8c21f12078b214deb125adb75f7a31e777805e1d122aa73e991a69f77afea17fa38178a659f953a4ea23f7067603810865b15b34d8f0de72e6bcd90f1b488497bda87560494883f68ef98536c761a9e37982e625a1695964ae3c58c65d8382d7c7c961fb63b254fa69f7cac3b3d03a2efb4aced3f2caefe3ad7b567aabd35691ce5dec0049271da780c801012ff4f8b39337582bc5f2a80d803f0824c58c837ba21879a146e609bd73a263083951868bd08d04775ee589a5930ab6335506f313930a880c16e631cf46a110917d562badda3ff281faf7f3a5e7d45421c9f9926e3106add353c688bd17d727ca633bbe894c2499126775ef568d8965d532f96081e63ad6277d5e0abca82e232a191596031119cb35c56141507b5c70e27a15723da4cb43e01e066a1823b2c0a17886d6fb71cd83fd8dfcc8c1ab7412660a2c0f11a43b2f7d681bb5491fd42ba6e50b31228622fcb66918592f6545d85d02bd8deab81bba5c132fb8d3022271443462ef7898da681e501e77eab83d5328597c9d717fb0a8f9938312c79c1374aabb1d11cbd5c23e801ed595b3af9319b1d85027cd8ef557e643a4c81fc4dc106ec370e813996e6bd1107b983baab69e5b0853244b43649fd440d89fdd007c4457b490b45ec9176b467b2438dfae12a61860226817c90b7dd5d2fca5d05115b48ee9dfce51303805714c7cd492deb3ddd53b0319fc053380a735e3fe13d7f71079cad118e8293d399a9d91655528ec23e20daebb5729037de6a0922e973b8ec68b6e8be7d75e4fa3ccbcd49bc7e79e9f36e26ecef0ef4fe02b35928ecc112d04e59b0a30dc1309c5a34495edaac9859e56bc35e7be43774274697ef60b5513fd37d734a5046b1738cc86ba6e51ee6c1aec43d5e292f91181c218a3c2610eaf44c92cdb850322dbe580e972f5f883762290f23fb5ce734b2387c9a2cc23ac35cae0138134a150741bf9509d09775b1ca26df24648b0dcfb69ce8364750132757a522c43821f951238929e30bc4c5956f6ef2a0b2182bbb618b46e98ccb8a7b013d50c59d6fc4e223642c77a0a250f593a7a1b6d5b716aa9da4c585639473441bc1727c28eea8a09abdf8cbe89911d8e2b6680bde5acf2b24a4f80ce60acf7387ea038395b96961b8578dd9438156c8fb0908501f919dd0c22f7924591b39e0f690271a0f71a14886148a124e91b56760336dffb8c1617ea3143024f5296d9ecb0b86c5238f8d70fac07d6aace7267c6f6784d4a7149cfaef757d3f0d39104af0e927319d153607d0f0fbfe0656ed620154ff63bec293e51584d9c9fbc15ccae1d089b24613bf170028da023d131698492cc9ea06cecbc0ad02e2809710b9acd61d7d0e1bfe18a4519baecfa4f2e3f869ed4cfc9b402d03e0bcb15b1f75960ce01b20d3cd6f745fa373789034c7b4cc061ec26342764f2a5097ae6909ace0120c8fdeb0480f4dfd67aeac8f091e4fed39dc46b4b0dd24f29deebb72c9c890e61e5dff6341baec35ef8c574b8ad0fbe9d51dfc3a15025a214f157758264892a211e997053532a52e37d6e7367d76f677ce5a4068b9cfc4e952f972c9f37c11367f0cd08f7e3b5545084ced467a47a83fccfbe6728a961fc54f54d9a044209002e5265033521d098737ab42b6eb8bb30a4e6f001410ac1a341a944a14dad779bda06b0592618003303f49de38a4a859b6b05da3e82e2a5b233e56b0b972e274566bc690044a4d704f5d757e9975a6078b4b9a4adb273b8f20b07325eaf5c5ddd834fcaaf54ccd7deb6bef53e0aa97ad0835ef4f1c20a4a43688100d95527f8b016a1746d5ad577d80d9f5a17ef07f5eba48dba4433b45def49a4fe4f3df2c35a7826ca08ed6ba3e587bb7d1b7479f6df04510feb18b7d765db12675e407154bfd2735d38999d9e47d956b9d27fa774e3659b3907cbc4bed42c2fd5c4adaf0cb123930c6795752606f974bc55b531554f3ecd718aeda3d6689e9f049c35149bb3019d07f7c2bf407d81cdd2e2d31aae99b0bed766fd4efedcbb6a0dfabd2257ca99a75890f85c1e4a04894a688b6903ed9e11e5ace63d2fea6446f6ec352123724c24722c767bbab45f3bbb16d90996ed3cde09b4728d7485fb4dab48bc285f0f86472cbd7e06d436011ac613c31d327df2d246059c7d0b2836035b94fa207629ee8cf91853fefbba45f62124ab87917d42e24015d9479282a93cc86389fba2c24c7b5e9b03143fa2090390f89e6b3249f84cf593bcf03ce1f152d12e13cddac4e1b75e4cc10ffdd19c139c6baabcbe1521be9a9260fd8f4451533d496d4da994ab62863e87c0a4944f17f7c65591ade04fe8fe587468c450e4e52ce9f23e3fb7341ec4a6a69c6734616314bd4945d23904e061a847e761546ed94255475c45cfb74a2e2bba27a1e25929de74d12d89d3b03eade32df4aab47a9cb5e9a04c7c6ade6b19dc8f9b91806e321b5e91b0a420410a8b9bd6d8770faaadd6c059e309c43fa1e13fd54226e8ffb0781901775904f676486ec740a915df46bc13c03ab80d84a32c6d1e9cb00e1dd4e7e5de80bce22fc8ca7bfbf8b02fa0b101b953d2cdf739ace284b9b14b875a01265fbee973567cf028110fbc074aaa3c613f54fb49b599c3fc4a6094cef2a0e791dbd88e9e5d22d5a820570c5266539cecf292a36dd4b6962cf567d8d69ce3ab6b2c5162384d2266a6baf2e5b0ed384d6635b919ec260619f0ecc3184e4b0c6101a063e81e44084409dc5e7e014346c8c1542e9e04a4ac6219fa45e62f3aab28acc1fdbb40aa6bf151faf078fbce122fee8b23dedeac66bda5435954fba42936f26a1bf69bba384ff6068065042f2073ce50722c64a5bd49024d5a1656f9dc7d8faada087cba821708de8ed41ee2530dab363c5842f2ab4e0641cae68aae9e29ae477dc428571e694f12aa4d87145414c01c0702f20807a1f540f6b5ad106b5cc8dbc2e9bf09d6436054112e3647d40549e2881df8f99ea8aea717e4f20965704f255d87793c88e0c998c76bbd05f6fb7b8cfc4fb78ce91beefc1e53c7985c75c0977a2420afb7f6ab063cf95b7fd9ab0ef428f32585c88102a9ce3187b9f1c94505a1eb63e572fbadaddc00f93f9edd90146e3dac00fb6690cbec5b509d56e3336b11ecb4266247f479f8d52a808ee871190fa650eb0df22fd9ba940c4ae60af5441dd1be2e9465151aab1ea4df895520e4a95aadd0d8fcf69da3e79a659334301895456668861ef24a35bc6bc4d31ed2d6061fd83405b142c2062fb7780b31817c63c52bf23159313435749b044a54134f93f92f07c33846dfae3ccef647707351cdab223413923ccb196ec557bd421c21beccadffaab7833697381636f84d1f4a5ae122ee6fe71676e7c1f9d14f2184105f1695fde0b54de735787adad9dde15a0cb831e655b397eaf5cf82674a5d2e136a471b5a5c997b65b78881b581ff0bcdde9b4aa275f1921265d57c31f652099a01eaa1fda86f460e41abf29a2630b969a20d9acfd5a487e7d73fc2a33a43d5c60e7ec16bbd8f3c5c52ce710e2cfa15c37c48f47251b3ac22be6a8245974c3faf5d0af7c4478551d932f96ab1418af683cdc89eb515e2d9541ca42be12d54895fb79ae913cba019383064f616ed7fe0d09246ca432557ab323a01fec9a7fabda55b417291b0d69c8a883118c43b3cbf2e452fb46757b93fc745b26cee6a16c0e67e3151e07d15e097e26f67a1d54cecf7293b873016b396110bb51a6a43a3835ba39dd4cd3d7628e15c716f98fbfe6801d4876db4672fc8f835bd8dcfef9afae85dffc138884af48ea0a3dfeec31238f1fd2950f19ebdee8c94edd056bacbe193ebd695e94a2498aaf658dee1a2457766227b2729dd72070d79feb0e896a2bcb5b8599984ebc3a0a53b9fd81e19fbda4fea2f2e786268957856ad4e4bba3bef3db6a2cdbdf4535d7a534624730edd52e19ac1ef6ac0f4322ed92c39088ed29e65c07ac89a1ba5adc5af6c4281c461c09a4c6cc14c5abf19110d5be585ff5e98ef77e232d735543065c7474be4d39d3edb77197006f7c5f048a82d10a21a5b206889f2ff8d644d57e2aedf17ff229a2f562be49ad7ff6f5f15534d343bc0a723f316016f8ce158759c41c22e269cc520e621ce9005266eaa5e56f875b9ec0f4dfcfb038f30ecad0f773403b3d43f62ebc7947f33d4cbc5150efd65fa9d31e034f7bdab28fba921f485c5ab24c8a3d9163c750dc505d0619a7f6bef2a2e032756d77db77907df2b5a3d86f4d98ac577fdc86eea40ee3883ae96"})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:25 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:25 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc000000, 0x0, 0x0, 0x0)

08:56:25 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x12)

08:56:25 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3f000000, 0x0, 0x0, 0x0)

08:56:25 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x7, 0x268503)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netlink\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000002080)={{r0}, "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"})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000080), 0x7, 0x268503) (async)
dup(r0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netlink\x00') (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000002080)={{r0}, "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"}) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)

08:56:25 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:25 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x18)

08:56:25 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="0000000000000000950000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:26 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x1e)

08:56:26 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="000000000000000095000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:26 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x24)

08:56:26 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x600d0000, 0x0, 0x0, 0x0)

08:56:26 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="000000000000000095000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:26 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x12000000, 0x0, 0x0, 0x0)

08:56:26 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:26 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x2a)

08:56:27 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x30)

08:56:27 executing program 5:
syz_open_dev$sndmidi(&(0x7f0000000080), 0x7, 0x268503) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000080), 0x7, 0x268503)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f00000000c0)='net/netlink\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$BTRFS_IOC_SNAP_CREATE(r4, 0x50009401, &(0x7f0000002080)={{r0}, "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"})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:27 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="000000000000000095000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:27 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x0)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:27 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x660d0000, 0x0, 0x0, 0x0)

08:56:27 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x18000000, 0x0, 0x0, 0x0)

08:56:28 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x36)

08:56:28 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:28 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
r4 = signalfd4(r1, &(0x7f00000001c0)={[0x4, 0x3]}, 0x8, 0xc0000)
dup(r4)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0xb8, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x2b, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0xb8}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf2507000000080001001000000008000300", @ANYRES32=r9, @ANYBLOB="0400cc000400cc0005005300000400cc000500530000000000080005000500000005005300010000000400cc0008000500000000002402de2472e39113184b96f5145fdc3271eb4670ac04ba420c6ad434eb8f12152e50530ac2960dd725c16d09624c57398aa8ed4819baf7aa92bcd6a15b463ffae1b8b84c964ee19628583db3b9c2d1df222d6c6f4e433a0fc7"], 0x64}}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[ 1725.809480][T31270] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
08:56:28 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:28 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x3c)

08:56:28 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
r4 = signalfd4(r1, &(0x7f00000001c0)={[0x4, 0x3]}, 0x8, 0xc0000)
dup(r4)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0xb8, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x2b, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0xb8}}, 0x0) (async)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf2507000000080001001000000008000300", @ANYRES32=r9, @ANYBLOB="0400cc000400cc0005005300000400cc000500530000000000080005000500000005005300010000000400cc0008000500000000002402de2472e39113184b96f5145fdc3271eb4670ac04ba420c6ad434eb8f12152e50530ac2960dd725c16d09624c57398aa8ed4819baf7aa92bcd6a15b463ffae1b8b84c964ee19628583db3b9c2d1df222d6c6f4e433a0fc7"], 0x64}}, 0x0) (async, rerun: 32)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (rerun: 32)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:28 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xf0)

08:56:28 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:29 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
r4 = signalfd4(r1, &(0x7f00000001c0)={[0x4, 0x3]}, 0x8, 0xc0000)
dup(r4)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0) (async)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0)
socket$nl_generic(0x10, 0x3, 0x10) (async)
r6 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async)
r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff)
r8 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) (async)
ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000700)={'wlan1\x00', <r9=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0xb8, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_TX_RATES={0x9c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xc}, @NL80211_BAND_2GHZ={0x8c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_LEGACY={0x8}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HT={0x2b, 0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}, @NL80211_TXRATE_VHT={0x14}, @NL80211_TXRATE_HE={0x14}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}]}]}]}, 0xb8}}, 0x0)
sendmsg$NL80211_CMD_NEW_INTERFACE(r5, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022cbd7000fbdbdf2507000000080001001000000008000300", @ANYRES32=r9, @ANYBLOB="0400cc000400cc0005005300000400cc000500530000000000080005000500000005005300010000000400cc0008000500000000002402de2472e39113184b96f5145fdc3271eb4670ac04ba420c6ad434eb8f12152e50530ac2960dd725c16d09624c57398aa8ed4819baf7aa92bcd6a15b463ffae1b8b84c964ee19628583db3b9c2d1df222d6c6f4e433a0fc7"], 0x64}}, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:29 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[ 1726.475625][T31289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'.
08:56:29 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x6b0d0000, 0x0, 0x0, 0x0)

08:56:29 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x3b5)

08:56:29 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1e000000, 0x0, 0x0, 0x0)

08:56:29 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x0, 0x2, 0x0, r1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:29 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:29 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:29 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x3b9)

08:56:29 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r0 = dup(0xffffffffffffffff)
write$6lowpan_enable(r0, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:30 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x3bb)

08:56:30 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:30 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
dup(r0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:30 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x3c1)

08:56:30 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x6f0d0000, 0x0, 0x0, 0x0)

08:56:30 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:30 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x1f000000, 0x0, 0x0, 0x0)

08:56:31 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x0, 0x2, 0x0, r1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async, rerun: 32)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (rerun: 32)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 64)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:31 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
dup(r0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:31 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x500)

08:56:31 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:31 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x7f000000, 0x0, 0x0, 0x0)

08:56:31 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x20000000, 0x0, 0x0, 0x0)

08:56:31 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x600)

08:56:31 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}}, 0x4000000)
dup(r0)
write$6lowpan_enable(0xffffffffffffffff, &(0x7f0000000000)='0', 0xfffffd2c)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:31 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = dup(r0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x0, 0x2, 0x0, r1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000140)=<r3=>0x0, &(0x7f00000000c0)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
dup(r0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000380)={0x0, 0x6, 0x0, 0x0, 0x2, 0x0, r1}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000140), &(0x7f00000000c0)) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
socket(0x1d, 0x2, 0x6) (async)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r5, 0x6612) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)

08:56:31 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:32 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbdc)

08:56:32 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:32 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:32 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x24000000, 0x0, 0x0, 0x0)

08:56:32 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbe4)

08:56:32 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x820d0000, 0x0, 0x0, 0x0)

08:56:32 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:32 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:32 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbea)

08:56:33 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbf0)

08:56:34 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:34 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:34 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbf2)

08:56:34 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x270d0000, 0x0, 0x0, 0x0)

08:56:34 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x91120000, 0x0, 0x0, 0x0)

08:56:34 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, 0x0, 0x0)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:34 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:34 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbf7)

08:56:34 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0) (async)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0) (async, rerun: 32)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:34 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:34 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:34 executing program 5:
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0) (async)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:34 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbfb)

08:56:35 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:35 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x10c2, 0x0, 0x0, 0x11}, 0x3)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0, 0x1}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000600)="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", &(0x7f0000000140)=@tcp, 0x1}, 0xbc)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r7)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r7, r8]}, 0x80)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f00000000c0)={0x8, r4}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:35 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x2a000000, 0x0, 0x0, 0x0)

08:56:35 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb3120000, 0x0, 0x0, 0x0)

08:56:35 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbfd)

08:56:35 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0) (async)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x10c2, 0x0, 0x0, 0x11}, 0x3)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0, 0x1}, 0x80, 0x0}}], 0x1, 0x0) (async, rerun: 64)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) (async, rerun: 64)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r6}, 0x20) (async, rerun: 32)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000600)="05fefd7341e4f2429baa62c5ae94e83e9f07c6f4818d91401d5d2472410032f102700c7f5526aa1c5b0a65822c6d6a5c800ad0a485f83396dc7acc71cc0b899ee0cf3cb2204847b1f66d23f174a4ff162230a301feb166d2997ee773693df0f3d73c5a54fed6eef2dd07cec62e452107a624cbe798a9e8c36c2ef39a4606aad0d71801917f5c6383030000000630f8effb594236ab08ab611115eca16f68e275ab5cce2b844e166f02d0f6e9edbd364b080b1e798885bcbc35f570ffb4d43050e2223ae11c7a45bb4e2601707613d94d5e815f22942865dd0583d05d1ac75b7ad2b400075524f305b82a7d3d089d5751c13936af3670e0baad543e453edd0673f021d85a4bd4aab444905554249644d5deb563df9eaa0f0af413c5e4e1323cfdb1d753bbebb85e456acf2f73eb4cf9fc7d23c600", &(0x7f0000000140)=@tcp, 0x1}, 0xbc) (async, rerun: 32)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r7) (async)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r7, r8]}, 0x80)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f00000000c0)={0x8, r4}, 0x0) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:35 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:35 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:35 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xc00)

08:56:35 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x10c2, 0x0, 0x0, 0x11}, 0x3) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0, 0x1}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) (async)
r6 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r6, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4) (async)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r6}, 0x20)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r5, &(0x7f0000000600)="05fefd7341e4f2429baa62c5ae94e83e9f07c6f4818d91401d5d2472410032f102700c7f5526aa1c5b0a65822c6d6a5c800ad0a485f83396dc7acc71cc0b899ee0cf3cb2204847b1f66d23f174a4ff162230a301feb166d2997ee773693df0f3d73c5a54fed6eef2dd07cec62e452107a624cbe798a9e8c36c2ef39a4606aad0d71801917f5c6383030000000630f8effb594236ab08ab611115eca16f68e275ab5cce2b844e166f02d0f6e9edbd364b080b1e798885bcbc35f570ffb4d43050e2223ae11c7a45bb4e2601707613d94d5e815f22942865dd0583d05d1ac75b7ad2b400075524f305b82a7d3d089d5751c13936af3670e0baad543e453edd0673f021d85a4bd4aab444905554249644d5deb563df9eaa0f0af413c5e4e1323cfdb1d753bbebb85e456acf2f73eb4cf9fc7d23c600", &(0x7f0000000140)=@tcp, 0x1}, 0xbc) (async)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r7)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8) (async)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500000018100000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r7, r8]}, 0x80) (async)
landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(r7, 0x1, &(0x7f00000000c0)={0x8, r4}, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:36 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:36 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc70b0000, 0x0, 0x0, 0x0)

08:56:36 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x13ced5f6c2a8508b, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
openat$dlm_plock(0xffffff9c, &(0x7f00000000c0), 0x624000, 0x0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480), 0x83a83, 0x0)
ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001)
syz_io_uring_setup(0xf3b, &(0x7f00000001c0)={0x0, 0xc071, 0x400, 0x2, 0x201}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)=<r7=>0x0)
r8 = openat$null(0xffffff9c, &(0x7f0000000240), 0x50200, 0x0)
r9 = syz_io_uring_setup(0x383, &(0x7f00000002c0)={0x0, 0x2000, 0x4, 0xfffffffe, 0x1f0, 0x0, r8}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000580), &(0x7f0000000180))
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x7)
syz_io_uring_submit(r2, r7, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r10}}, 0x5)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:36 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x10b7)

08:56:36 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc267", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:36 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x13ced5f6c2a8508b, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
openat$dlm_plock(0xffffff9c, &(0x7f00000000c0), 0x624000, 0x0)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0)
openat$capi20(0xffffffffffffff9c, &(0x7f0000000480), 0x83a83, 0x0) (async)
r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480), 0x83a83, 0x0)
ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed}) (async)
ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001)
syz_io_uring_setup(0xf3b, &(0x7f00000001c0)={0x0, 0xc071, 0x400, 0x2, 0x201}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)=<r7=>0x0)
r8 = openat$null(0xffffff9c, &(0x7f0000000240), 0x50200, 0x0)
syz_io_uring_setup(0x383, &(0x7f00000002c0)={0x0, 0x2000, 0x4, 0xfffffffe, 0x1f0, 0x0, r8}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000580), &(0x7f0000000180)) (async)
r9 = syz_io_uring_setup(0x383, &(0x7f00000002c0)={0x0, 0x2000, 0x4, 0xfffffffe, 0x1f0, 0x0, r8}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000580), &(0x7f0000000180))
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10) (async)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x7)
syz_io_uring_submit(r2, r7, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r10}}, 0x5)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:36 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x30000000, 0x0, 0x0, 0x0)

08:56:36 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x10bf)

08:56:36 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x0, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:37 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x13ced5f6c2a8508b, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
openat$dlm_plock(0xffffff9c, &(0x7f00000000c0), 0x624000, 0x0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000240), &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000000300)=<r4=>0x0, &(0x7f0000000080)=<r5=>0x0) (async)
r6 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000480), 0x83a83, 0x0)
ioctl$CAPI_REGISTER(r6, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed}) (async)
syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r6, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r4, r3, &(0x7f0000000340)=@IORING_OP_POLL_REMOVE={0x7, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x80000001)
syz_io_uring_setup(0xf3b, &(0x7f00000001c0)={0x0, 0xc071, 0x400, 0x2, 0x201}, &(0x7f0000004000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000240)=<r7=>0x0) (async)
r8 = openat$null(0xffffff9c, &(0x7f0000000240), 0x50200, 0x0)
r9 = syz_io_uring_setup(0x383, &(0x7f00000002c0)={0x0, 0x2000, 0x4, 0xfffffffe, 0x1f0, 0x0, r8}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000000580), &(0x7f0000000180))
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0)
io_uring_register$IORING_UNREGISTER_PERSONALITY(r9, 0x18, 0x20000a00, r10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r10}}, 0x7)
syz_io_uring_submit(r2, r7, &(0x7f0000000280)=@IORING_OP_ASYNC_CANCEL={0xe, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, {0x0, r10}}, 0x5) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:37 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x1183)

08:56:37 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd0030000, 0x0, 0x0, 0x0)

08:56:37 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x4, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:37 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc267", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:37 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x1200)

[ 1735.122971][ T1213] ieee802154 phy0 wpan0: encryption failed: -22
[ 1735.129331][ T1213] ieee802154 phy1 wpan1: encryption failed: -22
08:56:37 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc267", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:38 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:38 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x12c5)

08:56:38 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x36000000, 0x0, 0x0, 0x0)

08:56:38 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xed120000, 0x0, 0x0, 0x0)

08:56:38 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x1800)

08:56:38 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc267000005", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:38 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x1e00)

08:56:39 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc267000005", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:39 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0) (async)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async, rerun: 32)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async, rerun: 32)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x4, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:39 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:39 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x1f00)

08:56:39 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3c000000, 0x0, 0x0, 0x0)

08:56:39 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc267000005", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:39 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xfffff000, 0x0, 0x0, 0x0)

08:56:39 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x2000)

08:56:39 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0) (async, rerun: 32)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0) (async, rerun: 32)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x4, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:40 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:40 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x2400)

08:56:40 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, 0x0, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:40 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x2a00)

08:56:40 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:40 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xffffffff, 0x0, 0x0, 0x0)

08:56:40 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x3f000000, 0x0, 0x0, 0x0)

08:56:40 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa47ec5a7, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:41 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc26700000500", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:41 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x3000)

08:56:41 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:41 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x3600)

08:56:41 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:42 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x3c00)

08:56:42 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:42 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x0)

08:56:42 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x7f000000, 0x0, 0x0, 0x0)

08:56:42 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x3f00)

08:56:42 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], 0x0, 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:43 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0) (async, rerun: 32)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0) (rerun: 32)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa47ec5a7, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:43 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:43 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:43 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x8311)

08:56:43 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x2, 0x0, 0x0)

08:56:43 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x9d0b0000, 0x0, 0x0, 0x0)

08:56:43 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xb503)

08:56:43 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa47ec5a7, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
dup(r0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async)
syz_open_dev$sndmidi(&(0x7f00000000c0), 0xa47ec5a7, 0x0) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)

08:56:43 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:44 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xb710)

08:56:44 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xb903)

08:56:44 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:44 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, 0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(0x0, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:44 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:44 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x5, 0x0, 0x0)

08:56:44 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbb03)

08:56:44 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xaf050000, 0x0, 0x0, 0x0)

08:56:45 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:45 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xbf10)

08:56:45 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x6, 0x0, 0x0)

08:56:45 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:45 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:45 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xc103)

08:56:45 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xb4050000, 0x0, 0x0, 0x0)

08:56:45 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
r1 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r1, 0x6a, 0x4, 0x0, 0x0)
dup(r1)
r2 = dup(r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}}, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={<r5=>0x0, @rand_addr, @loopback}, &(0x7f0000000280)=0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}]}, 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x2cc, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4004}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '+&$[\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'net/ip_tables_matches\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '[,{,,..+&){-%^&6@\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'net/ip_tables_matches\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "a9cc726ebe6935fa9cf7b04e309c281085a62cf71d2a7cd02344ee384479385dd648590fdc8e78e200935b1887c66748255dc928358740e2ba990310e2d79452cd8409a6ff91d7ee1bf19706ae00f71a70"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5482}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':##\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r9 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000040)=<r11=>0x0)
io_uring_enter(r2, 0x51f2, 0x5443, 0x2, &(0x7f00000001c0)={[0xfffffbff, 0xd81]}, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r10, r11, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r12 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r12, 0x6a, 0x4, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r9, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[ 1743.344748][T31642] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
[ 1743.369516][T31642] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
08:56:46 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:46 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
socket(0x1d, 0x2, 0x6) (async)
r1 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r1, 0x6a, 0x4, 0x0, 0x0)
dup(r1) (async)
dup(r1)
dup(r0) (async)
r2 = dup(r0)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}}, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={<r5=>0x0, @rand_addr, @loopback}, &(0x7f0000000280)=0xc)
r6 = socket$nl_route(0x10, 0x3, 0x0)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}]}, 0x44}}, 0x0) (async)
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}]}, 0x44}}, 0x0)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x2cc, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4004}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '+&$[\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'net/ip_tables_matches\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '[,{,,..+&){-%^&6@\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'net/ip_tables_matches\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "a9cc726ebe6935fa9cf7b04e309c281085a62cf71d2a7cd02344ee384479385dd648590fdc8e78e200935b1887c66748255dc928358740e2ba990310e2d79452cd8409a6ff91d7ee1bf19706ae00f71a70"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5482}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':##\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x2cc, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4004}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '+&$[\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'net/ip_tables_matches\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '[,{,,..+&){-%^&6@\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'net/ip_tables_matches\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "a9cc726ebe6935fa9cf7b04e309c281085a62cf71d2a7cd02344ee384479385dd648590fdc8e78e200935b1887c66748255dc928358740e2ba990310e2d79452cd8409a6ff91d7ee1bf19706ae00f71a70"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5482}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':##\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x1}, 0x40000)
r9 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000040)=<r11=>0x0)
io_uring_enter(r2, 0x51f2, 0x5443, 0x2, &(0x7f00000001c0)={[0xfffffbff, 0xd81]}, 0x8)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r10, r11, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r12 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r12, 0x6a, 0x4, 0x0, 0x0) (async)
setsockopt$bt_BT_FLUSHABLE(r12, 0x6a, 0x4, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r9, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)
io_uring_enter(r9, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:46 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xc512)

[ 1743.785251][T31650] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
08:56:46 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[ 1743.897240][T31650] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
[ 1744.007757][T31651] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave
08:56:46 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
r1 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r1, 0x6a, 0x4, 0x0, 0x0) (async, rerun: 64)
dup(r1) (async, rerun: 64)
r2 = dup(r0) (async)
r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (rerun: 32)
sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x34, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_STRINGSETS={0x4}, @ETHTOOL_A_STRSET_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}]}]}, 0x34}}, 0x0)
getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={<r5=>0x0, @rand_addr, @loopback}, &(0x7f0000000280)=0xc) (async, rerun: 64)
r6 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64)
r7 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00', <r8=>0x0})
sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_ACTIVE_SLAVE={0x8, 0x2, r8}]}}}]}, 0x44}}, 0x0) (async)
sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r1, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000002c0)={&(0x7f0000000440)={0x2cc, r4, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nicvf0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @ETHTOOL_A_PRIVFLAGS_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0x120, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0xc4, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x4004}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '/dev/snd/midiC#D#\x00'}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '+&$[\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'net/ip_tables_matches\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '[,{,,..+&){-%^&6@\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x1a, 0x2, 'net/ip_tables_matches\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x55, 0x4, "a9cc726ebe6935fa9cf7b04e309c281085a62cf71d2a7cd02344ee384479385dd648590fdc8e78e200935b1887c66748255dc928358740e2ba990310e2d79452cd8409a6ff91d7ee1bf19706ae00f71a70"}]}, @ETHTOOL_A_PRIVFLAGS_FLAGS={0xe4, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x0, 0x2, 0x7}, @ETHTOOL_A_BITSET_BITS={0x80, 0x3, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000001}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5482}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, ':##\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '}{\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x1}, 0x40000) (async)
r9 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r10=>0x0, &(0x7f0000000040)=<r11=>0x0)
io_uring_enter(r2, 0x51f2, 0x5443, 0x2, &(0x7f00000001c0)={[0xfffffbff, 0xd81]}, 0x8) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r10, r11, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
r12 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r12, 0x6a, 0x4, 0x0, 0x0)
getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r12, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000140)=0x8) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r9, 0x2ff, 0x0, 0x0, 0x0, 0x0)

[ 1744.093899][T31651] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1)
08:56:46 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xdc0b)

08:56:47 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x7, 0x0, 0x0)

08:56:47 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:47 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:47 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0x0, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:47 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xba050000, 0x0, 0x0, 0x0)

08:56:47 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xe40b)

08:56:47 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xea0b)

08:56:47 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:47 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xf000)

08:56:48 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:48 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xf00b)

08:56:48 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xbc070000, 0x0, 0x0, 0x0)

08:56:48 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xc, 0x0, 0x0)

08:56:49 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
dup(r0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)

08:56:49 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r3, 0x0, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r7 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r7, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r6, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r7}, 0x20)
r8 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r8)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, 0x0, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r9, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r10}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:49 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:49 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xf20b)

08:56:49 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xbd050000, 0x0, 0x0, 0x0)

08:56:49 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x12, 0x0, 0x0)

08:56:49 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xf70b)

08:56:49 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:49 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x18, 0x0, 0x0)

08:56:50 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x1e, 0x0, 0x0)

08:56:50 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xfb0b)

08:56:50 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:50 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r4 = socket$rxrpc(0x21, 0x2, 0x2)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
dup(r0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
socket$rxrpc(0x21, 0x2, 0x2) (async)
ioctl$EXT4_IOC_PRECACHE_EXTENTS(r4, 0x6612) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)

08:56:50 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:50 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x24, 0x0, 0x0)

08:56:50 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xfd0b)

08:56:50 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:50 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc8030000, 0x0, 0x0, 0x0)

08:56:50 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x2a, 0x0, 0x0)

08:56:51 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x30, 0x0, 0x0)

08:56:51 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:51 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x20000)

08:56:51 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x36, 0x0, 0x0)

08:56:51 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3c, 0x0, 0x0)

08:56:51 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x7, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, 0x1d4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000001380)=@in6={0xa, 0x100, 0x0, @private0}, 0x80, 0x0}}, {{&(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e20, 0x10000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xe9b9}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000840)="c0eecb4483eca58ec72faa5b85c983b1c8444682b2beba851a9da86a4636154243160909f87f8f0be2a811398b4762b3b78b70d0baf3289a74ee3d12450be4bc87978a8d9c2d445c6256f8d2140adbfba00528f1d075895d6bd079e8eb66be0f515c24739bbc097cd835d54ceaf78d2ee0ef48c8aca453f3f01ce4f8fc74fce4ecc1f3309388e9f8bec8cc723f00ccefa667bdf5d55f88563f21dfbdcd119dbed55a4860eedfcac737648e227f0000000060f46b948ff0c78ea1b3a6c593d281c70609e1615df3d62cba9e6ecf", 0xcd}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="f800000015010000000100004ddbd8cd35b4506bb2e511d11f3d37182ae26e230f422105a51bd4fadc560a91ee16955d2050e90f4a88baea606d0ec022177f2f978e7de8fbabf915339dade0b3f38662cea3ca48f3e65bba8fc30a00838dde4447d0ed961283107c5e9319597fb878890d5fac683583f72f790cdb8deecdc84635c301a1046b3d2380b6ad5be2a4cfe3f169db32aed0d72c5e5f6f47f1c3b1ed75313eba48578c66d4f015685a02c55475f0758d98285953c1654ce0042de5365297b3f41666b254bec5d28c7673beb808951b89bd190f322a158f1c89b35b0ab7b4dcfc9678fb667e8f80fd26d95c4f86bf541891fb000080000000090100000002000003d7c3effc953d21893f5729f6bb4c6fbc5e04033d2522aab8f2ace7ca482a9a9adf645f03c1c5204f09325603f175955974c08c0d1638191a1179da19e8c69622acf080835f0e86f9392908ae75bec0759377920a553c8cacd85dc5099de675a6fb50f9ff346794dfbf7152c46f16122d000000f400000029000000810000009d68bee6e757fb44e6fabd8fc8327c95f7f19149ca25b53481690269f391f8e649fafa72d4b23edbb9d56f99fa8e53767a78e501f9ad70f2005511025b743fbe4cec007d11bbdd84bca9b93860ebe029853c7b888469a0c41d2437aebef3348310142d09b745c695e86700627a1327e13bfaff7c897123b4568263887c7222bd49107af0e7a17bf3043c16015c118ecc1f0f6b664d364c463bb61ddf5750f4e7cc1594d0aa3ececb7489b0cc380abf0705a81e062f6e5426926279c6149d05d8caf77f76bbd1b46239d0d787eae54e27ad120538058dc1a80e50c3804714230fcd26148f030000004c00000014010000001004005136e059e061cb1e729fad09a2e076d3b13763d2e643b0de70f3a40b4eb97e05ed51cd316f12e6a453097db1e0b29884866e7a44761ecb671f16e31ce6185b007c00000000000000200000001c886d98be4a667c147dbeec50946e6b8214ecc9cbab9869b295b20cfdc88547262eb3275e483d1d8defa7ede74ac65ef7d51f8adcfbf589c344d4d1939062f917747af05fb8881d0700000047533dc514566d39b9c5e12d5040dc97cce27e37774c398508880ffbceb46988f6068900"], 0x334}}], 0x2, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)
r5 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000200))

08:56:51 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:51 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0xf0ffff)

08:56:51 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xf0, 0x0, 0x0)

08:56:51 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="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"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:51 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc9030000, 0x0, 0x0, 0x0)

08:56:52 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x3d0, 0x0, 0x0)

08:56:52 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0) (async)
r1 = syz_io_uring_setup(0x7, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, 0x1d4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000001380)=@in6={0xa, 0x100, 0x0, @private0}, 0x80, 0x0}}, {{&(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e20, 0x10000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xe9b9}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000840)="c0eecb4483eca58ec72faa5b85c983b1c8444682b2beba851a9da86a4636154243160909f87f8f0be2a811398b4762b3b78b70d0baf3289a74ee3d12450be4bc87978a8d9c2d445c6256f8d2140adbfba00528f1d075895d6bd079e8eb66be0f515c24739bbc097cd835d54ceaf78d2ee0ef48c8aca453f3f01ce4f8fc74fce4ecc1f3309388e9f8bec8cc723f00ccefa667bdf5d55f88563f21dfbdcd119dbed55a4860eedfcac737648e227f0000000060f46b948ff0c78ea1b3a6c593d281c70609e1615df3d62cba9e6ecf", 0xcd}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x334}}], 0x2, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)
r5 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000200))

08:56:52 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x1000000)

08:56:52 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:52 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x500, 0x0, 0x0)

08:56:52 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x7, &(0x7f0000000380)={0x0, 0x0, 0x1, 0x0, 0x1d4}, &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000280)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0) (async, rerun: 32)
r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (rerun: 32)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r4) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000000140)=[{{&(0x7f0000001380)=@in6={0xa, 0x100, 0x0, @private0}, 0x80, 0x0}}, {{&(0x7f00000007c0)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x2, 0x2, 0x4, {0xa, 0x4e20, 0x10000, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x18}}, 0xe9b9}}}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000840)="c0eecb4483eca58ec72faa5b85c983b1c8444682b2beba851a9da86a4636154243160909f87f8f0be2a811398b4762b3b78b70d0baf3289a74ee3d12450be4bc87978a8d9c2d445c6256f8d2140adbfba00528f1d075895d6bd079e8eb66be0f515c24739bbc097cd835d54ceaf78d2ee0ef48c8aca453f3f01ce4f8fc74fce4ecc1f3309388e9f8bec8cc723f00ccefa667bdf5d55f88563f21dfbdcd119dbed55a4860eedfcac737648e227f0000000060f46b948ff0c78ea1b3a6c593d281c70609e1615df3d62cba9e6ecf", 0xcd}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="f800000015010000000100004ddbd8cd35b4506bb2e511d11f3d37182ae26e230f422105a51bd4fadc560a91ee16955d2050e90f4a88baea606d0ec022177f2f978e7de8fbabf915339dade0b3f38662cea3ca48f3e65bba8fc30a00838dde4447d0ed961283107c5e9319597fb878890d5fac683583f72f790cdb8deecdc84635c301a1046b3d2380b6ad5be2a4cfe3f169db32aed0d72c5e5f6f47f1c3b1ed75313eba48578c66d4f015685a02c55475f0758d98285953c1654ce0042de5365297b3f41666b254bec5d28c7673beb808951b89bd190f322a158f1c89b35b0ab7b4dcfc9678fb667e8f80fd26d95c4f86bf541891fb000080000000090100000002000003d7c3effc953d21893f5729f6bb4c6fbc5e04033d2522aab8f2ace7ca482a9a9adf645f03c1c5204f09325603f175955974c08c0d1638191a1179da19e8c69622acf080835f0e86f9392908ae75bec0759377920a553c8cacd85dc5099de675a6fb50f9ff346794dfbf7152c46f16122d000000f400000029000000810000009d68bee6e757fb44e6fabd8fc8327c95f7f19149ca25b53481690269f391f8e649fafa72d4b23edbb9d56f99fa8e53767a78e501f9ad70f2005511025b743fbe4cec007d11bbdd84bca9b93860ebe029853c7b888469a0c41d2437aebef3348310142d09b745c695e86700627a1327e13bfaff7c897123b4568263887c7222bd49107af0e7a17bf3043c16015c118ecc1f0f6b664d364c463bb61ddf5750f4e7cc1594d0aa3ececb7489b0cc380abf0705a81e062f6e5426926279c6149d05d8caf77f76bbd1b46239d0d787eae54e27ad120538058dc1a80e50c3804714230fcd26148f030000004c00000014010000001004005136e059e061cb1e729fad09a2e076d3b13763d2e643b0de70f3a40b4eb97e05ed51cd316f12e6a453097db1e0b29884866e7a44761ecb671f16e31ce6185b007c00000000000000200000001c886d98be4a667c147dbeec50946e6b8214ecc9cbab9869b295b20cfdc88547262eb3275e483d1d8defa7ede74ac65ef7d51f8adcfbf589c344d4d1939062f917747af05fb8881d0700000047533dc514566d39b9c5e12d5040dc97cce27e37774c398508880ffbceb46988f6068900"], 0x334}}], 0x2, 0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)
r5 = openat$ubi_ctrl(0xffffff9c, &(0x7f00000001c0), 0x2000, 0x0)
ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r5, 0x8008f513, &(0x7f0000000200))

08:56:52 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x2000000)

08:56:52 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x600, 0x0, 0x0)

08:56:52 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x3)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:52 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:53 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:53 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x700, 0x0, 0x0)

08:56:53 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x4000000)

08:56:53 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xc9050000, 0x0, 0x0, 0x0)

08:56:53 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xbc7, 0x0, 0x0)

08:56:53 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x5000000)

08:56:53 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xc00, 0x0, 0x0)

08:56:53 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xd60, 0x0, 0x0)

08:56:53 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x6000000)

08:56:53 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xd66, 0x0, 0x0)

08:56:54 executing program 5:
r0 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = socket(0x1d, 0x2, 0x6)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x3)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)
syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async)
dup(r0) (async)
syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000040)) (async)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00') (async)
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0) (async)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) (async)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async)
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0) (async)
socket(0x1d, 0x2, 0x6) (async)
setsockopt$bt_BT_FLUSHABLE(r5, 0x6a, 0x4, 0x0, 0x0) (async)
sendfile(r4, r5, 0x0, 0x3) (async)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0) (async)

08:56:54 executing program 0:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000140))
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004001}, 0x4000000)
dup(r0)
r1 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r2=>0x0, &(0x7f0000000040)=<r3=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(r2, r3, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0)
r6 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1f, 0x7, &(0x7f00000007c0)=ANY=[@ANYBLOB="180000000400000000000000e20000001800000007000000000042d88b20ca0e347f4bc2670000050000", @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000380)='syzkaller\x00', 0x5, 0xbb, &(0x7f00000004c0)=""/187, 0x0, 0xc, '\x00', 0x0, 0x11, 0xffffffffffffffff, 0x8, &(0x7f0000000400), 0x8, 0x10, &(0x7f0000000580)={0x2, 0x8, 0x0, 0x40}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f00000005c0)=[0xffffffffffffffff, 0xffffffffffffffff, r5, 0xffffffffffffffff, r6, 0xffffffffffffffff]}, 0x80)
syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
memfd_secret(0x0)
io_uring_enter(r1, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:54 executing program 3:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0xd6b, 0x0, 0x0)

08:56:54 executing program 1:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
ioctl$CAPI_REGISTER(r1, 0x400c4301, &(0x7f00000000c0)={0x0, 0x0, 0xed})
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0x0, 0x0, 0x0, 0x8000000)

08:56:54 executing program 2:
prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0)
r0 = syz_open_dev$sndmidi(&(0x7f0000000240), 0x2, 0x141181)
sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB="702033068cae94dc16d5cc32524a1cb2ca9dcbe3e199aef0d3376fb56021912be5b0d27c50709fb7584df5c58916759cf3a8e6cdc051172900dd99b7a2958166f6e4ecce0274cb852bd85503c69f1b3903c5ebc2aca40def452cb79017ac46fc07c51401500d8a2fceeea0e32772acdd8c3762e0518e2d4f7f2acb3f6e6bcb2b9af5796da28ee302dc26510e385c8c6292a76a1a074e6e540e60074d108d77723d0142e1012e9efafc58221d156ff6f1d73130c356fa2e695a620edcbadd2a0c41e8be302f8d926f23704fc96270022a02be3de078327b5e52fcd80800270000000100867896bc7e6917d895514bc1eecb4ff79caa0564d9b29c60d129d87f83f21fba1527f3aa9be147d514577e211f574f9fee2a50e0b176f1afc755374582cf69"], 0x54c}}, 0x4000000)
r1 = dup(r0)
write$6lowpan_enable(r1, &(0x7f0000000000)='0', 0xfffffd2c)
r2 = syz_io_uring_setup(0x3ede, &(0x7f0000000380), &(0x7f0000002000/0x2000)=nil, &(0x7f0000004000/0x1000)=nil, &(0x7f0000000100)=<r3=>0x0, &(0x7f0000000040)=<r4=>0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/ip_tables_matches\x00')
syz_io_uring_submit(0x0, r4, &(0x7f0000000400)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd_index=0x8, 0x0, 0x0}, 0x0)
r5 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0)
r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)={'pim6reg1\x00', 0x2})
sendmmsg(0xffffffffffffffff, &(0x7f0000002040)=[{{&(0x7f0000001380)=@in6={0xa, 0x0, 0x0, @private0}, 0x80, 0x0}}], 0x1, 0x0)
r7 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48)
r8 = socket$inet6(0xa, 0x80002, 0x0)
setsockopt$sock_int(r8, 0x1, 0x10, &(0x7f0000000180)=0x4, 0x4)
bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r7, &(0x7f0000000280), &(0x7f0000000a80)=@udp6=r8}, 0x20)
r9 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r9)
r10 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
close(r10)
r11 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0)
syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_OPENAT={0x12, 0x46, 0x0, r10, 0x0, &(0x7f0000000280)='./file0\x00', 0x90, 0x290000, 0x23456, {0x0, r11}}, 0x2)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000004000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x0, 0x0)
openat$cgroup_procs(0xffffffffffffffff, 0x0, 0x2, 0x0)
memfd_secret(0x0)
io_uring_enter(r2, 0x2ff, 0x0, 0x0, 0x0, 0x0)

08:56:54 executing program 4:
r0 = syz_io_uring_setup(0x112, &(0x7f0000000100), &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000040), &(0x7f0000000180))
r1 = openat$capi20(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd=r1, 0x0, 0x0}, 0x0)
syz_io_uring_setup(0x7d7a, &(0x7f0000000080)={0x0, 0x7494, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000000000/0x1000)=nil, &(0x7f00000001c0), 0x0)
io_uring_enter(r0, 0x40b3, 0xd1050000, 0x0, 0x0, 0x0)

[ 1752.222548][T20653] ------------[ cut here ]------------
[ 1752.228455][T20653] WARNING: CPU: 1 PID: 20653 at io_uring/io_uring.c:2999 io_ring_exit_work+0xfb6/0x1370
[ 1752.238306][T20653] Modules linked in:
[ 1752.242283][T20653] CPU: 1 PID: 20653 Comm: kworker/u4:26 Not tainted 6.3.0-syzkaller #0
[ 1752.250568][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 1752.260699][T20653] Workqueue: events_unbound io_ring_exit_work
[ 1752.266841][T20653] RIP: 0010:io_ring_exit_work+0xfb6/0x1370
[ 1752.273659][T20653] Code: 18 01 00 00 65 48 2b 04 25 28 00 00 00 0f 85 5d 03 00 00 48 81 c4 20 01 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 7a bc 7b fd <0f> 0b 41 bc 70 17 00 00 e9 19 f3 ff ff e8 68 bc 7b fd 48 89 ef e8
[ 1752.293586][T20653] RSP: 0018:ffffc90006377bc0 EFLAGS: 00010293
[ 1752.299681][T20653] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[ 1752.307718][T20653] RDX: ffff88802bad9d40 RSI: ffffffff84073406 RDI: 0000000000000007
[ 1752.315758][T20653] RBP: fffffffffffffff9 R08: 0000000000000007 R09: 0000000000000000
[ 1752.323864][T20653] R10: fffffffffffffff9 R11: 0000000000094001 R12: 0000000000000005
[ 1752.331901][T20653] R13: ffff88807b88c838 R14: ffff88807b88c000 R15: ffff88807b88c3c8
[ 1752.339903][T20653] FS:  0000000000000000(0000) GS:ffff8880b9900000(0000) knlGS:0000000000000000
[ 1752.348909][T20653] CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 1752.355572][T20653] CR2: 0000000000000040 CR3: 000000002068d000 CR4: 00000000003506e0
[ 1752.363624][T20653] DR0: 00000000e08e0006 DR1: 0000000000000000 DR2: 0000000000000000
[ 1752.371668][T20653] DR3: 0000000000000000 DR6: 00000000ffff0ff0 DR7: 0000000000000400
[ 1752.379680][T20653] Call Trace:
[ 1752.383013][T20653]  <TASK>
[ 1752.385974][T20653]  ? io_uring_try_cancel_requests+0xce0/0xce0
[ 1752.392126][T20653]  ? lock_release+0x670/0x670
[ 1752.396844][T20653]  ? lock_downgrade+0x690/0x690
[ 1752.401791][T20653]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 1752.407819][T20653]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1752.413110][T20653]  process_one_work+0x991/0x15c0
[ 1752.418103][T20653]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 1752.423581][T20653]  ? spin_bug+0x1c0/0x1c0
[ 1752.427954][T20653]  ? _raw_spin_lock_irq+0x45/0x50
[ 1752.433063][T20653]  worker_thread+0x669/0x1090
[ 1752.437775][T20653]  ? process_one_work+0x15c0/0x15c0
[ 1752.443014][T20653]  kthread+0x2e8/0x3a0
[ 1752.447097][T20653]  ? kthread_complete_and_exit+0x40/0x40
[ 1752.452770][T20653]  ret_from_fork+0x1f/0x30
[ 1752.457222][T20653]  </TASK>
[ 1752.460246][T20653] Kernel panic - not syncing: kernel: panic_on_warn set ...
[ 1752.467528][T20653] CPU: 1 PID: 20653 Comm: kworker/u4:26 Not tainted 6.3.0-syzkaller #0
[ 1752.475792][T20653] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/14/2023
[ 1752.485884][T20653] Workqueue: events_unbound io_ring_exit_work
[ 1752.491972][T20653] Call Trace:
[ 1752.495250][T20653]  <TASK>
[ 1752.498199][T20653]  dump_stack_lvl+0xd9/0x150
[ 1752.502838][T20653]  panic+0x688/0x730
[ 1752.506787][T20653]  ? panic_smp_self_stop+0x90/0x90
[ 1752.511926][T20653]  ? show_trace_log_lvl+0x285/0x390
[ 1752.517160][T20653]  ? io_ring_exit_work+0xfb6/0x1370
[ 1752.522478][T20653]  check_panic_on_warn+0xb1/0xc0
[ 1752.527446][T20653]  __warn+0xf2/0x390
[ 1752.531357][T20653]  ? io_ring_exit_work+0xfb6/0x1370
[ 1752.536570][T20653]  report_bug+0x2da/0x500
[ 1752.540943][T20653]  handle_bug+0x3c/0x70
[ 1752.545150][T20653]  exc_invalid_op+0x18/0x50
[ 1752.549678][T20653]  asm_exc_invalid_op+0x1a/0x20
[ 1752.554546][T20653] RIP: 0010:io_ring_exit_work+0xfb6/0x1370
[ 1752.560378][T20653] Code: 18 01 00 00 65 48 2b 04 25 28 00 00 00 0f 85 5d 03 00 00 48 81 c4 20 01 00 00 5b 5d 41 5c 41 5d 41 5e 41 5f c3 e8 7a bc 7b fd <0f> 0b 41 bc 70 17 00 00 e9 19 f3 ff ff e8 68 bc 7b fd 48 89 ef e8
[ 1752.579999][T20653] RSP: 0018:ffffc90006377bc0 EFLAGS: 00010293
[ 1752.586079][T20653] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000
[ 1752.594102][T20653] RDX: ffff88802bad9d40 RSI: ffffffff84073406 RDI: 0000000000000007
[ 1752.602088][T20653] RBP: fffffffffffffff9 R08: 0000000000000007 R09: 0000000000000000
[ 1752.610067][T20653] R10: fffffffffffffff9 R11: 0000000000094001 R12: 0000000000000005
[ 1752.618051][T20653] R13: ffff88807b88c838 R14: ffff88807b88c000 R15: ffff88807b88c3c8
[ 1752.626053][T20653]  ? io_ring_exit_work+0xfb6/0x1370
[ 1752.631283][T20653]  ? io_uring_try_cancel_requests+0xce0/0xce0
[ 1752.637369][T20653]  ? lock_release+0x670/0x670
[ 1752.642056][T20653]  ? lock_downgrade+0x690/0x690
[ 1752.646914][T20653]  ? lockdep_hardirqs_on_prepare+0x410/0x410
[ 1752.652914][T20653]  ? _raw_spin_unlock_irq+0x23/0x50
[ 1752.658157][T20653]  process_one_work+0x991/0x15c0
[ 1752.663122][T20653]  ? pwq_dec_nr_in_flight+0x2a0/0x2a0
[ 1752.668535][T20653]  ? spin_bug+0x1c0/0x1c0
[ 1752.672909][T20653]  ? _raw_spin_lock_irq+0x45/0x50
[ 1752.677967][T20653]  worker_thread+0x669/0x1090
[ 1752.682673][T20653]  ? process_one_work+0x15c0/0x15c0
[ 1752.687932][T20653]  kthread+0x2e8/0x3a0
[ 1752.692015][T20653]  ? kthread_complete_and_exit+0x40/0x40
[ 1752.697664][T20653]  ret_from_fork+0x1f/0x30
[ 1752.702114][T20653]  </TASK>
[ 1752.705429][T20653] Kernel Offset: disabled
[ 1752.709983][T20653] Rebooting in 86400 seconds..