r0 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r1 = dup(r0)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1000006, 0x12, r1, 0x0)
sigaltstack(&(0x7f0000ffd000/0x1000)=nil, 0x0)
sigaltstack(&(0x7f0000ffc000/0x4000)=nil, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x20000, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ff9000/0x7000)=nil, 0x7000, 0x0, 0x13, r3, 0x0)
r4 = memfd_create(&(0x7f0000000000)='\x00', 0x7)
sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x80000009e9)
perf_event_open(&(0x7f0000000340)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x3}, 0x0, 0x10000, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r5 = socket$inet6_tcp(0xa, 0x1, 0x0)
connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c)
syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000100)='./file0\x00', 0x40000, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="2000000080000000060000006a0000000f000000000000000100000001000000004000000040000020000000d5f4655fd6f4655f0100ffff53ef", 0x3a, 0x400}, {&(0x7f0000010400)="0200000003000000040000006a", 0xd, 0x800}], 0x12440, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"])
syz_io_uring_submit(r2, 0x0, &(0x7f0000000080)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd=r4, 0x101, 0x0, 0x9, 0x3, 0x1}, 0x80)
newfstatat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100), 0x800)
r6 = eventfd(0x0)
lseek(r6, 0x7, 0x3)
fork()