r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[])
r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0)
chdir(&(0x7f0000000040)='./file0\x00')
r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0)
r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x110)
ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x1)
pipe2(&(0x7f0000000000)={0x0, <r4=>0x0}, 0x80800)
syz_open_dev$loop(&(0x7f0000001140), 0xc9cf, 0x8441)
ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000400)={&(0x7f00000003c0)=""/56, 0x38, 0x4, 0x800})
inotify_add_watch(r1, &(0x7f0000000100)='./file1/file0\x00', 0x50000204)
write$P9_RREADLINK(r2, &(0x7f0000000480)=ANY=[@ANYRES32=r3, @ANYRES16=r4, @ANYRES32, @ANYBLOB="616754c4b0eb53a57e97ea68f18f7cb6a87d33eee94e7f0fe6ca72913edbe0d550ddf13d6d2403e5345d04f0a071ba73fa5e5fcd49b63f21cec4853238dfdaf369a639919e66959519681cb9f344955667cd8d617b0105a062e8afe07bfac0f1337f7b8f166507a4d8ba235528ac6e99c5e5206c3ced54ba6a7dce039ce4ddc887dd6ba571787de2962aa5434e21bd533361f9a3538079f28e348e810c4885cd267aa4f02d6aadbc1258911b3cd75231fd16934c26d65683c032b9836a35974cb2062353c408000000a379f674ec3316758da4aefe3974ba574a0c0fe6", @ANYRES64], 0x10)
openat(r0, &(0x7f0000000380)='./file0\x00', 0x181, 0x56)
r5 = creat(&(0x7f00000001c0)='./file1\x00', 0x62)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, 0xffffffffffffffff, 0x0)
io_uring_enter(0xffffffffffffffff, 0x58ab, 0x0, 0x0, 0x0, 0x0)
write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x0)
write$binfmt_elf64(r5, &(0x7f0000000440)=ANY=[], 0xfdef)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
sendfile(r2, r3, 0x0, 0x100000001)