r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[])
r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x110)
r4 = openat2$dir(0xffffffffffffff9c, &(0x7f00000004c0)='./file1/file0\x00', &(0x7f0000000500)={0x48501, 0x0, 0x4}, 0x18)
sendfile(0xffffffffffffffff, r4, &(0x7f0000000540)=0xfffffffffffffffc, 0x10001)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, 0x0)
r5 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file1\x00', 0x50000, 0x1)
openat2$dir(0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x402480, 0x0, 0x3}, 0x18)
creat(&(0x7f0000000240)='\x00', 0x100)
sendmsg$NL80211_CMD_GET_SURVEY(r5, &(0x7f0000000600)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00033f007000fe328d6e000c0099000002000825000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20020802)
sendfile(r1, r4, &(0x7f0000000640)=0xffffffffffff9f25, 0x9)
write$P9_RREADLINK(r2, &(0x7f0000000480)=ANY=[@ANYRES16], 0x10)
write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000440)=ANY=[@ANYRES16], 0xfdef)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)