r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = syz_io_uring_setup(0xba7c, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f00000001c0)=<r2=>0x0, &(0x7f0000000240)=<r3=>0x0)
accept(r0, 0x0, &(0x7f0000000080))
r4 = creat(0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000840)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r4, &(0x7f00000007c0)={0x2, 0x40, 0x2}, &(0x7f0000000800)='./file1\x00', 0x18, 0x0, 0x12345}, 0x9)
r5 = socket$inet6_udplite(0xa, 0x2, 0x88)
syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r5, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0}}, 0x0)
io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0)
r6 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
fallocate(r6, 0x0, 0x0, 0x1000002)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1000009, 0x1f012, r6, 0x0)
r7 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0)
ioctl$SNAPSHOT_FREE(r7, 0x3305)
dup2(r7, 0xffffffffffffffff)
clone3(&(0x7f0000000640)={0x20000, &(0x7f0000000140), &(0x7f0000000180), &(0x7f0000000200), {0x36}, &(0x7f0000000500)=""/224, 0xe0, &(0x7f0000000340)=""/137, &(0x7f0000000600)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x7}, 0x58)