r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x13, r0, 0x0) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000280)=ANY=[], 0xfdef) r2 = syz_io_uring_setup(0x1c23, &(0x7f00000002c0)={0x0, 0x0, 0x10, 0x0, 0xffffffff}, &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f00000003c0), &(0x7f0000000180)=0x0) mount$9p_fd(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x8, &(0x7f0000000580)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@access_uid}, {@cache_fscache}, {@mmap}, {@uname={'uname', 0x3d, '(^)'}}, {@dfltgid}], [{@appraise}, {@audit}, {@fsmagic={'fsmagic', 0x3d, 0x8000}}, {@appraise_type}, {@fowner_lt}, {@func={'func', 0x3d, 'POLICY_CHECK'}}, {@fsname}]}}) io_uring_enter(r2, 0x77a3, 0xb2fb, 0x2, 0x0, 0x0) r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r2, 0x0) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_SPLICE={0x1e, 0x4, 0x0, @fd=r0, 0xc2, {0x0, r1}, 0x4, 0x2, 0x1}, 0x8000) r5 = syz_io_uring_complete(r4) r6 = fcntl$dupfd(r0, 0x406, r5) socket$inet_icmp(0x2, 0x2, 0x1) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x20000, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x33b5d7113452bb0b, @perf_bp={&(0x7f00000001c0), 0x3}, 0x0, 0x0, 0x0, 0x5, 0x4, 0x1, 0xff}, 0x0, 0xffdffffdffffffff, r6, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) fsetxattr$security_ima(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000340)=@md5={0x1, "202cbb517aa3f5ab705132a75bb06a64"}, 0x11, 0x1) r7 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000009c0), 0x2002) fallocate(r7, 0x4, 0x2, 0x5)