perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4304, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040)=0x0, &(0x7f0000000140)=0x0) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, r3, 0x0, &(0x7f0000000900)={&(0x7f0000000200)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000300)="a63a", 0x2}, {0x0}, {0x0}], 0x33}, 0x0, 0x4008000}, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xa, 0x1010, r0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x100000e, 0x13, r0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x8, 0x10, 0xffffffffffffffff, 0x0) syz_io_uring_submit(r4, 0x0, &(0x7f00000004c0)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x1, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000400)="64ed6a293adae5f2afbc0261d54ce445aad59af094ee814b87b34204d29fcac895e4c10af3e055fb8ade009bca3b9efd6a79d4f40f39c6f465f2f2e79f9ec3cd315b09028d1edc521c4a7c39caf51ee207a8808bd918a3d2811ea7d326e6eb6b85a146b3ea91d01aa4be3d2140ffd0817b332a5ddcb153ebc9caa83dcbc6859b4b3c67905beac0cf4dbb0bf67355d8f151cbe1cde46f5f8d", 0x98, 0x10100, 0x2c0b0b2e8e8b18d8}, 0x1) syz_io_uring_setup(0x10d7, &(0x7f0000000080)={0x0, 0x874c, 0x0, 0x1, 0x39f, 0x0, r0}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000100), &(0x7f0000000280)=0x0) syz_io_uring_setup(0x3a75, &(0x7f0000000080), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(0x0, r6, 0x0, 0x0) r7 = syz_io_uring_setup(0x620e, &(0x7f0000000180), &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100), &(0x7f0000000140)=0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(0x0, r8, &(0x7f0000000080)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x16, 0x0, {0x0, r9}}, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000340)=@IORING_OP_WRITE_FIXED={0x5, 0x5, 0x4000, @fd_index=0x3, 0x4, 0x6000000000, 0x3, 0x2, 0x1, {0x3, r9}}, 0x5bbf) r10 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r0, 0x8000000) madvise(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x3) ioctl$HCIINQUIRY(0xffffffffffffffff, 0x800448f0, 0x0) syz_io_uring_submit(r10, r2, &(0x7f00000002c0)=@IORING_OP_RECVMSG={0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0}, 0x80000001)