r0 = syz_mount_image$vfat(&(0x7f0000000240), &(0x7f00000000c0)='./file1\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000140)="3c9007000400000061740002010000f001000000000000", 0x17}, {0x0}], 0x20, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file1\x00', 0x101142, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) ioctl$SNAPSHOT_PREF_IMAGE_SIZE(0xffffffffffffffff, 0x3312, 0x1) pipe2(&(0x7f0000000000)={0x0, 0x0}, 0x80800) r2 = syz_open_dev$loop(&(0x7f0000001140), 0xc9cb, 0x129441) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000400)={&(0x7f00000003c0)=""/56, 0x38, 0x4, 0x800}) pidfd_getfd(0xffffffffffffffff, 0xffffffffffffffff, 0x0) dup3(r2, r1, 0x80000) r3 = syz_io_uring_setup(0x784e, &(0x7f0000000300), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000100)) ioctl$BTRFS_IOC_LOGICAL_INO(r3, 0xc0389424, &(0x7f0000000100)={0x9, 0x10, '\x00', 0x1, &(0x7f0000000080)=[0x0, 0x0]}) openat(r0, &(0x7f0000000380)='./file1\x00', 0x180, 0x54) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x640c, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)