openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0)
pipe(&(0x7f00000003c0)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$AUTOFS_DEV_IOCTL_CLOSEMOUNT(0xffffffffffffffff, 0xc0189375, &(0x7f0000000040)={{0x1, 0x1, 0x18, <r2=>0xffffffffffffffff}, './file0\x00'})
r3 = openat(r2, &(0x7f0000000140)='./file0\x00', 0x100000, 0x13a)
openat2(r2, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x80}, 0x18)
r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0)
r5 = syz_open_procfs(0x0, &(0x7f0000000080)='smaps\x00')
syz_mount_image$tmpfs(&(0x7f0000000280), &(0x7f00000002c0)='./file0/../file0\x00', 0x1, 0x0, 0xfffffffffffffffe, 0x282d92daf142acda, &(0x7f0000000300)={[{@huge_advise}, {@huge_advise}], [{@uid_gt={'uid>', 0xee00}}]})
r6 = perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe90, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
accept4$unix(r3, 0x0, &(0x7f0000000240), 0x80800)
mmap$IORING_OFF_SQ_RING(&(0x7f0000d1b000/0x2000)=nil, 0x2000, 0x3000001, 0x100010, r5, 0x0)
pread64(r5, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f)
ioctl$LOOP_CHANGE_FD(r5, 0x4c06, r6)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r4, r5}}, 0xb7)
syz_mount_image$vfat(&(0x7f0000000380), &(0x7f0000000100)='./file0\x00', 0x1, 0x0, 0x0, 0x920420, &(0x7f00000000c0)=ANY=[])
unlinkat(0xffffffffffffffff, &(0x7f00000004c0)='./file0\x00', 0x200)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_PROVIDE_BUFFERS={0x1f, 0x4, 0x0, 0x4, 0x1, &(0x7f0000000140)="46384e13ac35c4e29b094153a2ea4792291b0d6ae642b6958c4edef3af27566a34b51903dd1642aadd149258824643932152f1cccca1d422a261a365a1fe2fec10e7ae12a2bff248", 0x2, 0x0, 0x0, {0x3, r4}}, 0x20000000)
mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000400)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@aname={'aname', 0x3d, '9p\x00'}}]}})