r0 = memfd_create(&(0x7f00000003c0)='s{.\x00\a)\xe1\xc7\xe3\x00`&\x19\x1ezzG\xe4d\xf7+\x92\xb1\xda\xc52\xf7q\x9cU\xcep\xd3\xaf\xff\xc1\x87}\x00\xe6\a\x9f\xc6\xb2\xd7\v', 0x0)
mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x8000000)
r1 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x10010, 0xffffffffffffffff, 0x0)
r2 = syz_io_uring_setup(0x136, &(0x7f0000000180), &(0x7f0000d8f000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r3=>0x0, &(0x7f0000000140)=<r4=>0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240))
syz_io_uring_submit(r3, r4, 0x0, 0x0)
r5 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0)
syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x2, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r6 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000040)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x1, {0x23, r6}}, 0x7ff)
syz_io_uring_submit(r1, r4, &(0x7f0000000040)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r6}}, 0xf9c3)
r7 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'wlan1\x00'})
pwritev2(r7, &(0x7f0000000140)=[{&(0x7f0000000080)='u', 0x1}], 0x1, 0x100009, 0x0, 0x0)
close(0xffffffffffffffff)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20000, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffffffff78cd, 0x51114b1e}, 0x0, 0x0, 0x0, 0x0, 0x99}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x608e, 0xb592, 0x2, &(0x7f00000000c0)={[0x10001]}, 0x8)
copy_file_range(r7, 0x0, r0, 0x0, 0x300000000, 0x0)