r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2, 0x12, r1, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r2, 0x1008, &(0x7f0000000000), 0x0, 0x4)
syz_io_uring_submit(r2, 0x0, 0x0, 0x0)
fork()