r0 = syz_io_uring_setup(0x804ebb, &(0x7f0000000500)={0x0, 0x0, 0x10, 0x1, 0x27c}, &(0x7f0000dcc000/0x3000)=nil, &(0x7f0000e36000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000002c0)=<r2=>0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x66e2, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000240)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, 0x13}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
r4 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x665a972b69d13daf, 0x8010, r3, 0x8000000)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x1, 0x0, @fd_index=0x4, 0xffff, 0x0, 0x8a1, 0x2, 0x70e149709f7b0651}, 0x8001)
r5 = openat$nvram(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r5, 0x80083313, &(0x7f00000012c0))
openat(0xffffffffffffffff, 0x0, 0x18000, 0x0)
r6 = creat(&(0x7f0000000100)='./file0\x00', 0x0)
close_range(r6, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f0000000440)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=<r7=>r0, @ANYBLOB="ffffff7f000000002e2f66696c6530004293d165d266552e711aa9ecb38f115eab1e5b172a9773bd54f745ba8cdc222a913e9edf3ba576b9daa694d33bfcb44d91558c845866c64c20c1b74c91abe600bc4289b1437e98fa9bced0fce0fdbd2c7abf9b8193966006aeb1a991867e24f2395ff150b784648b8bc04fa5c4c01695a2143ac54bfe"])
mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000280), 0x10, &(0x7f0000000380)={'trans=fd,', {'rfdno', 0x3d, r6}, 0x2c, {'wfdno', 0x3d, r7}, 0x2c, {[{@uname={'uname', 0x3d, '\x00'}}, {@dfltuid}, {@loose}, {@uname={'uname', 0x3d, 'trusted.overlay.redirect\x00'}}], [{@func={'func', 0x3d, 'PATH_CHECK'}}]}})
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, r5, 0x8)
mmap$IORING_OFF_CQ_RING(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x8, 0x10, 0xffffffffffffffff, 0x8000000)
ioctl$AUTOFS_IOC_PROTOVER(r0, 0x80049363, &(0x7f0000000340))
lsetxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), &(0x7f00000001c0)='./file0\x00', 0x8, 0x0)
ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000000000))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)