syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x40, 0x0)
mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0)
r0 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x80000000, 0x0, 0x0, 0x100020, &(0x7f0000000900)=ANY=[])
umount2(&(0x7f0000000080)='./file0\x00', 0x4)
lseek(r0, 0xfa2b, 0x3)
r1 = geteuid()
ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000640)=<r2=>0x0)
mount$9p_unix(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='./file0\x00', &(0x7f0000000440), 0x0, &(0x7f0000000680)={'trans=unix,', {[{@access_user}], [{@audit}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user={'obj_user', 0x3d, 'cgroup2\x00'}}, {@subj_type={'subj_type', 0x3d, 'cgroup2\x00'}}, {@uid_lt={'uid<', 0xee00}}, {@uid_gt={'uid>', r1}}, {@fowner_eq={'fowner', 0x3d, r2}}]}})
unlinkat(r0, &(0x7f0000000140)='./file0\x00', 0x0)
unlinkat(r0, &(0x7f00000004c0)='./file0\x00', 0x200)
rename(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='./file0\x00')
mbind(&(0x7f0000003000/0x3000)=nil, 0x3000, 0x1, 0x0, 0x0, 0x3)
ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=<r3=>0x0)
prlimit64(r3, 0x4, &(0x7f00000001c0)={0x4, 0xfff}, &(0x7f0000000280))
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x9}}, r3, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = open(&(0x7f0000000180)='./file0\x00', 0x240880, 0x0)
mkdirat(r4, &(0x7f0000000040)='./file0\x00', 0x0)