r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000100)=[{&(0x7f0000000180)="eb3c906d6b66732e66617400020801000470008400f001", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[])
ioctl$FAT_IOCTL_SET_ATTRIBUTES(r0, 0x40047211, &(0x7f0000000000)=0x7)
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r1=>r0}, './file0\x00'})
openat(r1, &(0x7f0000000140)='./file0\x00', 0x100000, 0x13a)
r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r2, 0x0, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0)
r3 = openat2(r1, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80, 0x2}, 0x18)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
r6 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r5, @out_args}, './file0\x00'})
accept4$unix(r3, &(0x7f0000000680), &(0x7f0000000240)=0x6e, 0x80800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000d1b000/0x2000)=nil, 0x2000, 0x3000001, 0x100010, r5, 0x0)
pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r4, r5}}, 0xb7)
r7 = syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[])
unlinkat(r7, &(0x7f00000004c0)='./file0\x00', 0x200)
mkdirat(r7, &(0x7f0000000140)='./file0\x00', 0x10)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000240)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd=r3, 0x0, 0x0, 0x9, 0x1, 0x0, {0x0, r4, r7}}, 0x4)