r0 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
io_uring_enter(0xffffffffffffffff, 0x250e, 0x0, 0x2, &(0x7f0000000280)={[0x7e]}, 0x8)
r1 = signalfd4(r0, &(0x7f0000000140)={[0x1]}, 0x8, 0x800)
syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x1000004, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0x0, 0x6000, @fd=r1, 0x7f, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x8)
socket$nl_generic(0x10, 0x3, 0x10)
mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', 0x0, 0x1001000, &(0x7f00000001c0)=ANY=[])
r2 = mmap$IORING_OFF_SQES(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1, 0x20010, r1, 0x10000000)
r3 = io_uring_register$IORING_REGISTER_PERSONALITY(r1, 0x9, 0x0, 0x0)
syz_io_uring_submit(0x0, r2, &(0x7f0000000540)=@IORING_OP_OPENAT={0x12, 0x5, 0x0, r1, 0x0, &(0x7f0000000480)='./file0/../file0\x00', 0x6, 0x1a900, 0x23456, {0x0, r3}}, 0x2)
mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x20, 0x0)