r0 = syz_io_uring_setup(0x4d4f, &(0x7f00000002c0), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f0000000140))
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x10, r0, 0x0)
recvmsg$unix(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000300)=@abs, 0x6e, &(0x7f0000000440)=[{&(0x7f0000000380)=""/53, 0x35}, {&(0x7f00000003c0)=""/82, 0x52}], 0x2, &(0x7f0000000600)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x78}, 0x40010101)
sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x0, 0x77)
ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0)
r2 = syz_io_uring_setup(0xb97, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=<r3=>0x0, &(0x7f0000000100)=<r4=>0x0)
syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x2, 0x0, 0xffffffffffffff9c, &(0x7f0000000d80), &(0x7f00000000c0)='./file1\x00', 0xfffffffffffffe3b}, 0x0)
r5 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0xf, 0x13, r2, 0x8000000)
syz_io_uring_submit(r5, r4, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x0, 0x0, @fd, 0x0, 0x0}, 0x80000001)
io_uring_enter(r2, 0x58ab, 0x0, 0x0, 0x0, 0x0)