r0 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00') r1 = signalfd4(r0, &(0x7f0000000180)={[0x7fffffff]}, 0x8, 0x40000) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd}, 0x14}}, 0x4008800) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, 0x0, 0x80) openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x800, 0x100) r2 = syz_mount_image$ext4(0x0, &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000004c0)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) r3 = syz_io_uring_setup(0x4dcf, &(0x7f00000002c0), &(0x7f0000ff5000/0x9000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000200)=0x0, &(0x7f0000000140)) io_uring_register$IORING_UNREGISTER_EVENTFD(r3, 0x5, 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f0000000680)=ANY=[@ANYRESOCT, @ANYRES16=r1, @ANYBLOB="10132ea3ac10edc0c3efc214bd10eed238e88a1bf37503d9d8c1ee4f3d31a39fca", @ANYRESDEC=r3, @ANYRES32=r2, @ANYRESOCT, @ANYBLOB="2cd14106c2a51e1ab98bb2cef5d7590bbce278a7f2ce52a55b954ad7380fe22e459c82329584785baefd47eb9a629733f0884af151203af14f26f9ac93901e06909937afd5b858a84766f8f31e1b7cf549ec682791ffc8a699d36ae00295aae3f86bc2b02d726b3cf22bdea75c0ba825893445f3e9338d347a8bf11dfc94889738a9b07b0361ce571c53956438690baf1af39dde338e48861dd8da8b0fbcd289c980d4d15dbb0a9365b869782e6bd5e37d26274312102df98fdec1042a24088fc1062235210c", @ANYRES16, @ANYRES64, @ANYRESOCT=r4, @ANYRES16=r4, @ANYRESHEX=r3]) setfsgid(0xee01) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xb052) ftruncate(r2, 0x40) syz_io_uring_submit(0x0, 0x0, 0x0, 0xfffffffa) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000380)=ANY=[@ANYBLOB="010000000600000000000000222689e2d1756d16b2d0bf8366a548036712ada906dd98c494f34dcdf97da0f0be5d5d05000000a3509b83d9349c5f00982105fe667fb61d08963af6d85202d1f5ba13d65955de", @ANYRES32, @ANYBLOB='\b\x00\x00\x00\x00\x00\x00\x00.\x00\x00\x00\x00\x00\x00\x00']) fcntl$setownex(0xffffffffffffffff, 0xf, &(0x7f00000001c0)={0x2}) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x1, 0x5}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4d, 0x200}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pread64(r0, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f) syz_io_uring_complete(0x0)