r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x46e2, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x3000000, 0x10, r0, 0x8000000) syz_mount_image$tmpfs(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x10000, 0x3, &(0x7f0000000540)=[{&(0x7f00000002c0)="1d8340e2159644829af6cf2f25fb87bbb74190fe18d3e66975b79809410b42d8a14fb58e62808183fed96eb23ea208162ac97e5976aa591fef532ab3c31ce643642476", 0x43, 0x5}, {&(0x7f00000003c0)="2f42229d4f7e0019b2c1e2c4626105f45cbfda1b25ad8e7ba8c304d2a9995e0d3a889797c2992f8546e3374c50e53564189a5acf035c693b9721b6e18c4081cd7cb2110a2647334e128235c0f189cd60db9eff26805bff6ace5aa72989d0f10f1f8a01cfe472205980631e25f7ecebb11c5ae647c221eafde4537fd03c2609bd34b25cd30db6d7105ad1cc0db372d0d04dcd04eab48446703728fe7827cbc66682bdc35d549c60b5aec394316e516e9eedee5556a3393a3b22f4b7cf2e21f93d6e07edb347fd523972f069eb", 0xcc, 0x4}, {&(0x7f00000004c0)="c449f0d8b21d25be21bf28a800ab95580e58e2d732d83cbfa25db6dad42abf67d81e7390f25dd3b6a3847772f519ff055788fdcdc8074fc86341c60c9d0d7a734b4be30e02851ba85ad71e7368fde03c7e22f2dd051b520d97395b6140ed", 0x5e, 0x6}], 0x0, &(0x7f00000005c0)={[{@huge_always}, {@size={'size', 0x3d, [0x65, 0x32, 0x6d, 0x74, 0x70, 0x65, 0x30, 0x78, 0x33, 0x79]}}, {@nr_blocks={'nr_blocks', 0x3d, [0x78, 0x70, 0x36, 0x74]}}, {@mode={'mode', 0x3d, 0x810}}, {@huge_within_size}, {@huge_never}, {@huge_never}, {@uid={'uid', 0x3d, 0xffffffffffffffff}}], [{@smackfstransmute}, {@fscontext={'fscontext', 0x3d, 'root'}}, {@smackfsfloor}, {@fowner_eq}, {@dont_appraise}]}) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_ASYNC_CANCEL={0xe, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x3) ftruncate(r0, 0x1000003) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x24004850) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000180)={0xb2, 0xd34, 0x1, 0x0, 0x4}) ioctl$FS_IOC_FSSETXATTR(r0, 0x40086602, &(0x7f0000000000)) fsetxattr$security_capability(r0, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x1ff, 0x7f}]}, 0x18, 0x0) perf_event_open(&(0x7f00000001c0)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x1, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$binfmt_elf64(r0, &(0x7f00000001c0)=ANY=[], 0xfdef)