r0 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') pread64(r2, &(0x7f0000002840)=""/4126, 0x101e, 0x1) r3 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x7, 0x11, r2, 0x0) syz_io_uring_setup(0x390c, &(0x7f00000027c0)={0x0, 0x4400, 0x10, 0x3, 0x3c7}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x5000)=nil, &(0x7f0000003880)=0x0, &(0x7f00000038c0)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f0000003900)=@IORING_OP_FALLOCATE={0x11, 0x0, 0x0, @fd_index=0x1, 0x0, 0x0, 0x3, 0x0, 0x0, {0x0, r5}}, 0x3ff) syz_memcpy_off$IO_URING_METADATA_FLAGS(r3, 0x0, 0x0, 0x0, 0x4) r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) pidfd_getfd(r6, r6, 0x0) r7 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x0, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x16, 0x0, {0x0, r7}}, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x80000009e9) perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x5001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x200100, 0x0) preadv(r8, &(0x7f0000002700)=[{&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000180)=""/202, 0xca}, {&(0x7f0000000280)=""/108, 0x6c}, {&(0x7f00000003c0)=""/200, 0xc8}, {&(0x7f00000004c0)=""/251, 0xfb}, {&(0x7f00000005c0)=""/4096, 0x1000}, {&(0x7f00000015c0)=""/4096, 0x1000}, {&(0x7f00000025c0)=""/252, 0xfc}, {&(0x7f00000026c0)=""/19, 0x13}], 0x9, 0x0, 0x7ff) clone3(&(0x7f0000000300)={0x6e184900, 0x0, 0x0, 0x0, {0x7}, 0x0, 0x0, 0x0, 0x0}, 0x58)