r0 = syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x0, 0x2, &(0x7f0000000180)=[{&(0x7f0000000300)="eb3c906d6b66732e66617400020801000470008400f801", 0x17}, {0x0, 0x0, 0x1001000a00}], 0x0, &(0x7f0000000240)=ANY=[]) chdir(&(0x7f0000000040)='./file0\x00') execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)=[&(0x7f0000000140)='system_u:object_r:sshd_exec_t:s0\x00'], &(0x7f0000000380)=[&(0x7f00000002c0)='security.selinux\x00'], 0x1500) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file1\x00', 0x101142, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x0, 0x0) write$P9_RREADLINK(r1, &(0x7f0000000100)=ANY=[], 0x10) r3 = creat(&(0x7f0000000040)='./file0\x00', 0x0) write$binfmt_elf64(r3, &(0x7f0000000100)=ANY=[], 0xfdef) fallocate(r3, 0x3, 0x0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(0xffffffffffffffff, 0x6611) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0xca1, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$addseals(r4, 0x409, 0x8) fsetxattr$security_selinux(0xffffffffffffffff, &(0x7f0000000280), &(0x7f0000000340)='system_u:object_r:sshd_exec_t:s0\x00', 0x21, 0x2) mount(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x0, 0x0) r6 = dup(r5) ioctl$FITRIM(r6, 0xc0185879, &(0x7f00000003c0)={0x0, 0x7ff, 0x5}) sendfile(r1, r2, 0x0, 0x100000001)