r0 = syz_mount_image$vfat(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x400, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000000040)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x0, &(0x7f00000004c0)=ANY=[]) getdents64(r1, &(0x7f0000000080)=""/33, 0x21) r2 = openat(r1, &(0x7f0000000340)='./file1\x00', 0x42c400, 0x8) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x0) fsetxattr$security_capability(r2, &(0x7f00000002c0), &(0x7f0000000300)=@v2={0x2000000, [{0x2, 0x6}, {0x400, 0x2}]}, 0x14, 0x2) openat(r0, &(0x7f0000000000)='./file0/file0\x00', 0x141000, 0x190) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000240)) fspick(0xffffffffffffffff, &(0x7f0000000140)='./file0/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001000)=ANY=[@ANYBLOB="140000002c00ff2d000000000000002000000000"], 0x14}}, 0x0) ioctl$FICLONE(r3, 0x40049409, 0xffffffffffffffff) symlinkat(&(0x7f0000000180)='./file0/file0\x00', r0, &(0x7f00000001c0)='./file0/file0\x00') clone3(&(0x7f00000008c0)={0x7062500, 0x0, 0x0, 0x0, {0x23}, 0x0, 0x0, 0x0, 0x0}, 0x58) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) getresgid(&(0x7f00000010c0), &(0x7f0000001100), &(0x7f0000001140)) mount$9p_fd(0x0, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB="2c400a0600003d", @ANYRESHEX=r6, @ANYBLOB=',cache=mmap,cache=fscache,debug=0x0000000000000924,nodevmap,noextend,dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x0000000000000345,smackfstransmute=nodevmap,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',hash,fowner=', @ANYRESDEC=0x0, @ANYBLOB=',fsname=.,fowner>', @ANYRESDEC=0x0, @ANYBLOB=',\x00'])