r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0)
ftruncate(r0, 0x1000003)
ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000))
r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x105142, 0x0)
mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x40802, &(0x7f0000000980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r1, @ANYBLOB=',wfdno=', @ANYRESHEX, @ANYBLOB=',dfltuid=', @ANYRESHEX=0x0, @ANYBLOB="2c63616368653d6d6d61702c667363616368652c636163686574616737ae7048402f403a2c616603003d3078303030303030303030362c636163616d653d7ba3217d5c2d2c00fec80498fbf8be070d92919c1f28c6f87f0f65e8b337552dafd135edaaf1bdc2dc7e1f0bb156d0a7381bf414779ed949a75b43dddf9fdb7f47c9dc1d0be8e87e1429555590b7c9b7566114c5b19ef2"])
r2 = creat(&(0x7f0000000000)='./file2\x00', 0x0)
r3 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="34010000170001000000000000000000fe88000000001a0000740000000000010000000000000000e00000010000000000000000000000007f000001000000000000000000000000fc00000000000000000000000000000000000000000000000000000062000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="200100000000000000000000000000027f00000100000000000000000000000000000000000000000a00000067000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="00000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000060000000000000000000000000000000c0008000800080000000000"], 0x134}}, 0x0)
close(r2)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x200000a, 0x13, 0xffffffffffffffff, 0x0)
r5 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0)
ioctl$PTP_PEROUT_REQUEST2(r5, 0x40383d0c, 0x0)
r6 = mmap$IORING_OFF_SQES(&(0x7f0000ff9000/0x5000)=nil, 0x5000, 0x4, 0xabe023afc5a1eeb9, r2, 0x10000000)
ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(0xffffffffffffffff, 0xc0145401, &(0x7f0000000080)={0x1})
write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x4e, 0x0, 0x4, 0x6, 0x8, 0x3, 0x4, 0xffff8000, 0x3e, 0x38, 0x26d, 0x1000, 0x8a5, 0x20, 0x4, 0x20, 0x8, 0x1ff}, [], "4c447208a301189926908757adc7a6c45a9b280b496b6e879e8b58ba8250c029430113a619f5e7303e38c0bf89f7a70d6627f20c359b57bcaa3ced5531b96b53f124e473dbcdbd906b2cce112b788502dc99e65c28a353323fe284b943394738857469812c183f3699a0e28c0c325260ffa3d3e5be93b0492709e7420e014a264ab5d6155747386ac5bad470d816ff7b982512a27a23e0950188e58b4a94d92cefcf54a25da8ff6464b2f1da"}, 0xe4)
syz_io_uring_submit(r4, r6, &(0x7f00000000c0)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x7}, 0x80000001)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f0000000040)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
lseek(r1, 0x0, 0x2)
r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x4000, 0x128)
copy_file_range(r7, 0x0, r1, 0x0, 0x200f5ef, 0x0)