r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x200000, &(0x7f0000000240)=ANY=[])
r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0)
openat(r0, 0x0, 0x206000, 0x18)
open_tree(0xffffffffffffffff, &(0x7f0000000580)='./file1\x00', 0x80800)
chdir(&(0x7f0000000040)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x821000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {}, 0x2c, {[{@cache_fscache}, {@cache_loose}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/nbd'}}, {@appraise_type}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '[%\xb0'}}]}})
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10)
r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62)
openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x8200, 0x11)
write$binfmt_elf64(r4, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef)
mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='cgroup\x00', 0x8000, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sr(0xffffffffffffff9c, &(0x7f0000000400), 0x20100, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)