r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) fremovexattr(r0, &(0x7f0000000440)=ANY=[@ANYRESOCT=r0]) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x8044) r2 = syz_io_uring_setup(0x198a, &(0x7f0000000240)={0x0, 0x813d, 0x0, 0x0, 0x12d}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f00000b0000)=nil, &(0x7f00000002c0), &(0x7f0000002a40)) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000040)=ANY=[@ANYBLOB="0100007ddd6500000000c7", @ANYRES32=r1, @ANYRESOCT=0x0, @ANYRESOCT]) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000240)={'syz_tun\x00', &(0x7f0000000200)=@ethtool_cmd={0x1a}}) syz_io_uring_setup(0x62ed, &(0x7f0000000180), &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000100)=0x0, &(0x7f0000000140)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_POLL_REMOVE={0x7, 0x5, 0x0, 0x0, 0x0, 0x1}, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000300)={0x0, 0x4f52, 0x21, 0x0, 0x127, 0x0, r2}, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000001780), &(0x7f0000000080)=0x0) r6 = syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000380)='./file0\x00', 0xdbf, 0x2, &(0x7f0000001500)=[{0x0, 0x0, 0x8001}, {&(0x7f0000000400)="3122cb4e8d446ad79edd689b306387e68ad621ab9659e2b183c2807e2a9a673f50567ce46acd96eeae6423ebe5d05646811c88d9f15046e093", 0x39, 0x100000000}], 0x1004000, &(0x7f0000001540)={[{@fat=@errors_remount}, {@dots}], [{@fowner_eq={'fowner', 0x3d, r3}}, {@euid_eq={'euid', 0x3d, r3}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\x00'}}, {@subj_user={'subj_user', 0x3d, 'syz_tun\x00'}}]}) syz_io_uring_submit(r4, r5, &(0x7f0000001740)=@IORING_OP_STATX={0x15, 0x5, 0x0, r6, &(0x7f0000001600), &(0x7f0000001700)='./file0\x00', 0x2, 0x2000, 0x3}, 0x1) sched_getattr(0x0, &(0x7f00000017c0)={0x38}, 0x38, 0x0)