r0 = syz_io_uring_setup(0x1c28, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000180)=0x0) r3 = dup2(r0, r0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x4, 0x4000, @fd=r3, 0x1, 0x0, 0x0, 0x2, 0x1}, 0x0) syz_io_uring_setup(0x1f8, 0x0, &(0x7f0000fee000/0x4000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) io_uring_enter(r4, 0x1a28, 0xe38a, 0x2, &(0x7f0000000140)={[0x10000]}, 0x8) r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, 0xffffffffffffffff, 0x0) syz_io_uring_complete(r5) syz_io_uring_submit(r5, 0x0, &(0x7f0000000100)=@IORING_OP_READ_FIXED={0x4, 0x4, 0x0, @fd, 0x40, 0x4, 0xfffffff7, 0x1, 0x1, {0x3}}, 0x6) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) syz_io_uring_submit(r5, r2, &(0x7f0000000240)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)="ba6ab2c0e85a3ff31c1c49568a194f999e228d1fc5904d336ddfabc24d0052558610006c78d1d69d5d86fe54e5e3c9eb240c8a41557f119e67e92961ee2e7035", 0x40, 0x0, 0x1, {0x0, r6}}, 0x40) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r8 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ff8000/0x1000)=nil, 0x1000, 0xc, 0x13, r7, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r8, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001) io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)