r0 = perf_event_open(&(0x7f0000000440)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4347, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x9) socket$netlink(0x10, 0x3, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0xf36, @private2, 0x2f}, 0x1c) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(0xffffffffffffffff, 0x4c81, r2) ioctl$LOOP_CTL_REMOVE(r1, 0x4c81, r2) syz_io_uring_setup(0x3545, &(0x7f00000002c0)={0x0, 0xb47, 0x0, 0x0, 0x39d}, &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f00000000c0)) socket$inet(0x2, 0x3, 0x80000007) io_uring_enter(0xffffffffffffffff, 0x4634, 0x2101, 0x2, &(0x7f0000000200), 0x8) r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @private1, 0x9}, 0x1c) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x3, 0x2000, @fd_index=0x2, 0x200, 0x0, 0x0, 0x18, 0x0, {0x2}}, 0x0) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000280), 0x0) sendfile(0xffffffffffffffff, r5, &(0x7f00000003c0), 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r4, 0x0, 0x487, &(0x7f0000000340)={{0x2f, @local, 0x4e21, 0x3, 'lblcr\x00', 0x4c, 0x8001, 0xa}, {@broadcast, 0x4e27, 0x10000, 0x81, 0xffff}}, 0x44) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'syz_tun\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r6 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x810, r0, 0x10000000) syz_io_uring_submit(r3, r6, &(0x7f0000000400)=@IORING_OP_TIMEOUT={0xb, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000240)={0x77359400}}, 0x1)