r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) r1 = openat(r0, &(0x7f0000000200)='./file0\x00', 0x35e7eaa4871bc4b0, 0x0) chdir(&(0x7f0000000040)='./file0\x00') r2 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x1) faccessat2(r2, 0x0, 0x20, 0x300) write$P9_RREADLINK(r2, &(0x7f0000000100)=ANY=[], 0x10) openat(r0, &(0x7f0000000380)='./file1\x00', 0x180, 0x54) r4 = creat(&(0x7f00000001c0)='./file1\x00', 0x62) r5 = perf_event_open(&(0x7f0000001d80)={0x2, 0x80, 0x69, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r5, 0x40082406, &(0x7f0000000040)='vfat\x00') ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0) write$binfmt_elf64(r4, &(0x7f0000000540)=ANY=[@ANYRESDEC=r3, @ANYRES64=r1, @ANYRESDEC, @ANYRES64, @ANYBLOB="8b09c22c15e21dea4b5e991f10dc88e1c78cbdc95571cb2e26717fc5a551e81b824fdf729f8861d159e767796ae4ff32e6710a5fdbd83e71ee0fedcf5aa786884822119bf48c601f0e3ff550036af1db94a537313f758ca79a3134a09829413bb49fc109decd945451076f1bdda8afdf7838a47d5875b11b774d362e7cafc351d2087e08dc975ff0eb5850faa4f632bd7f5b0c975cc652b55d4280b76efa016ec5d9ac39874b568416eccc6d3429c0117a78d3192b7ec3a9c7a1fe22a5ef1e255591d14865a4246aea33df7c9e01234eaee33b6f01d05228cd099f6253a74e334434f9b0660fdacbb2f75cf16242cd7d5b1fbf69041bac", @ANYRES16, @ANYRES64, @ANYRESOCT, @ANYRESHEX=r3], 0xfdef) recvfrom$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)=@abs={0x0, 0x0, 0x4e23}, 0x6e) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r2, r3, 0x0, 0x100000001)