r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) openat(r0, 0x0, 0x206000, 0x18) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000280)='./file0\x00', &(0x7f0000000380), 0x821000, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@cache_fscache}, {@cache_loose}], [{@fscontext={'fscontext', 0x3d, 'user_u'}}, {@obj_user}, {@defcontext={'defcontext', 0x3d, 'root'}}, {@obj_role={'obj_role', 0x3d, '/dev/nbd'}}, {@appraise_type}, {@dont_measure}, {@smackfshat={'smackfshat', 0x3d, '[%\xb0'}}]}}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) openat(0xffffffffffffffff, &(0x7f0000000440)='./file1\x00', 0x8200, 0x11) write$binfmt_elf64(r5, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='cgroup\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000001700), 0xffffffffffffffff) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r4, 0x0, 0x100000001) r6 = fsmount(r4, 0x0, 0xf0) sendfile(0xffffffffffffffff, r6, 0x0, 0x3)