r0 = syz_mount_image$tmpfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=ANY=[])
r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x882c2, 0x0)
write$P9_RREADDIR(r1, &(0x7f0000000480)={0xb}, 0xb)
lseek(r1, 0x0, 0x4)