perf_event_open(&(0x7f0000000000)={0x2, 0x80, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000200), 0x0, 0x0) io_setup(0x5, &(0x7f0000000000)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000100), 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) io_submit(r1, 0x2, &(0x7f0000000140)=[&(0x7f0000001580)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0xff7ffffeffffeffd}]) linkat(r2, 0x0, r0, &(0x7f0000000140)='./file0\x00', 0x1000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) setuid(r4) syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x1, &(0x7f0000000200)=[{&(0x7f00000001c0), 0x0, 0xffffffffffffff80}], 0x11000, &(0x7f0000000240)={[{@norecovery}, {@dioread_nolock}, {@minixdf}, {@init_itable}, {@mblk_io_submit}, {@abort}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800000}}, {@barrier}, {@dax}, {@noacl}], [{@appraise}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}, {@subj_role={'subj_role', 0x3d, 'vfat\x00'}}, {@euid_eq={'euid', 0x3d, r4}}, {@appraise}, {@obj_type={'obj_type', 0x3d, 'vfat\x00'}}]}) io_setup(0x0, 0x0) socket$inet6(0xa, 0x1, 0x0) r5 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$LOOP_CTL_REMOVE(r5, 0x4c81, 0x0) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='attr/exec\x00') writev(r6, &(0x7f0000000cc0)=[{&(0x7f0000000000)="f3", 0x1}], 0x1) ioctl$LOOP_CTL_GET_FREE(r6, 0x4c82)