r0 = perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0x13bb, &(0x7f0000000140), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r2=>0x0, &(0x7f0000000100)=<r3=>0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000024c0)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c, 0x0}}], 0x1, 0x0)
r5 = socket$inet_udplite(0x2, 0x2, 0x88)
setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000240)={@multicast2, @local}, 0x8)
syz_io_uring_submit(0x0, r3, &(0x7f00000005c0)=@IORING_OP_TEE={0x21, 0x1, 0x0, @fd, 0x0, 0x0, 0x7f, 0x3, 0x1, {0x0, 0x0, r5}}, 0x2)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r4, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r1, 0x0)
r6 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r1, 0x8000000)
syz_io_uring_submit(r6, r3, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r1, 0x21c0, 0xedd3, 0x3, &(0x7f0000000040)={[0x100]}, 0x8)
fcntl$getownex(r0, 0x10, &(0x7f0000000580)={0x0, <r7=>0x0})
perf_event_open(&(0x7f0000000500)={0x5, 0x80, 0xca, 0x1, 0x0, 0x5, 0x0, 0x10001, 0x80000, 0xd, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400), 0x4}, 0x40902, 0x6, 0xffff0001, 0x5, 0xffffffffffffff28, 0x4, 0x2, 0x0, 0x8, 0x0, 0x7}, r7, 0xb, r0, 0x0)
madvise(&(0x7f0000ff6000/0xa000)=nil, 0xa000, 0x16)
syz_io_uring_setup(0x4345, &(0x7f0000000080)={0x0, 0xcfc4, 0x8, 0x1, 0x187, 0x0, r1}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f00000001c0), &(0x7f0000000240)=<r8=>0x0)
syz_io_uring_submit(r2, r8, &(0x7f0000000280)=@IORING_OP_WRITE_FIXED={0x5, 0x0, 0x4004, @fd_index=0x2, 0x3f, 0x99fa, 0x4, 0x2, 0x1}, 0x4)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)