r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[])
openat(r0, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r1 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x1)
pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80800)
r3 = syz_open_dev$loop(&(0x7f0000001140), 0xc9cb, 0x129441)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000400)={&(0x7f00000003c0)=""/56, 0x38, 0x4, 0x800})
dup3(r3, 0xffffffffffffffff, 0x80000)
write$P9_RREADLINK(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRESOCT, @ANYRES16, @ANYRESDEC], 0x10)
r4 = openat(r0, &(0x7f0000000380)='./file1\x00', 0x180, 0x54)
openat(r4, &(0x7f0000000280)='./file0\x00', 0x458243, 0x100)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYRESHEX], 0xfdef)
sendfile(r1, r2, 0x0, 0x100000001)