r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x400}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000ff9000/0x4000)=nil, 0x0, &(0x7f0000000a40)=<r1=>0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0)
syz_io_uring_submit(0x0, r1, &(0x7f00000000c0)=@IORING_OP_CONNECT={0x10, 0x4, 0x0, 0xffffffffffffffff, 0x80, &(0x7f00000003c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e21, @empty}, 0x1, 0x3, 0x2, 0x2}}}, 0x400)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_submit(0x0, 0x2, &(0x7f0000000440)=[&(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x0, 0x0, 0x2}, 0x0])
ioctl$FIONREAD(0xffffffffffffffff, 0x6801, 0x0)
syz_io_uring_setup(0x5e4e, &(0x7f0000000480)={0x0, 0x1}, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000080))
syz_io_uring_submit(r2, 0x0, &(0x7f0000000180)=@IORING_OP_READ=@use_registered_buffer={0x16, 0x0, 0x0, @fd=r0, 0x800}, 0x0)
r3 = syz_open_dev$loop(&(0x7f00000002c0), 0x4b2c, 0x68a880)
ppoll(&(0x7f0000000300)=[{r3, 0x300}, {0xffffffffffffffff, 0x1008}], 0x2, &(0x7f0000000340)={0x0, 0x3938700}, &(0x7f0000000380)={[0x1]}, 0x8)
syz_open_dev$evdev(&(0x7f0000000100), 0x2, 0x0)
openat$vcs(0xffffffffffffff9c, &(0x7f0000000700), 0x40000, 0x0)
clone3(&(0x7f0000000500)={0x1040100, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58)
execveat(0xffffffffffffffff, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1100)