r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x3, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f00000000c0)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x18, 0x12, 0x101, 0x0, 0x0, {}, [@nested={0x4, 0x36}]}, 0x18}}, 0x0) getdents(0xffffffffffffffff, &(0x7f0000000240)=""/72, 0x48) fsetxattr$trusted_overlay_nlink(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000180)={'L+', 0x7fffffff}, 0x16, 0x0) syz_mount_image$ext4(0x0, &(0x7f00000002c0)='./file0/file0\x00', 0x10000000000, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000140)='./file0/../file0\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x173000, 0x0) getdents64(0xffffffffffffffff, &(0x7f00000000c0)=""/149, 0x95) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="001800001cf4d4447646b37bb9ab2b3b8d7d4ebbce54cdb6a46100008bfca0642cf5dc46f7ffffff55d874c740080d8836cc2100ada6b9397961091969756aef14a8673fa1ff20091748b7a93ee050ba01fce417472c6e66abb26a8cf4a3d10c128e096410313c9d9adcdce087d7a4bac9d20f094728a0e7e3421d17d84cadda33dcd71483e2f4a2ecd2b9070a70221820a47488219ba25005cde7e5e06d00"/182, @ANYRESOCT, @ANYRESHEX]) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW2(r2, 0x402c542c, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, "0489fdc1843fc745ea52a5fff7962e807836db"}) open(&(0x7f0000000080)='./file0/file0\x00', 0x50000, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000200)=0x1, 0x1f) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, &(0x7f0000000000)=0x1) chroot(&(0x7f0000000340)='\x00') ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f00000003c0)=ANY=[@ANYBLOB="010000000100002000640000", @ANYRES32=r0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00./file0/../file0\x00']) read(r3, &(0x7f0000000540)=""/250, 0xfa) openat(r3, &(0x7f0000000380)='./file0\x00', 0x4000, 0x40) unshare(0x48020200)