r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x8, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4003}], 0x14, &(0x7f00000004c0)=ANY=[])
r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
r2 = openat(0xffffffffffffff9c, 0x0, 0x46e2, 0x0)
ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1)
openat(r2, &(0x7f00000002c0)='./file1/file0\x00', 0x6000, 0x8)
r3 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/255, 0xff}, {&(0x7f0000000380)=""/139, 0x8b}], 0x2)
ioctl$INCFS_IOC_CREATE_FILE(0xffffffffffffffff, 0xc058671e, 0x0)
getpgrp(0xffffffffffffffff)
r4 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r4, 0x0, 0x10000000c)
openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x401, 0x80)
r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs2/binder0\x00', 0x0, 0x0)
r6 = syz_open_dev$usbmon(&(0x7f0000003540), 0x0, 0x0)
ioctl$MON_IOCQ_URB_LEN(r6, 0x9201)
sendfile(r5, r6, &(0x7f0000000340)=0x1f, 0x97c8)
openat$cgroup_devices(r2, &(0x7f0000000040)='devices.deny\x00', 0x2, 0x0)
ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r3, 0x81f8943c, &(0x7f0000000480))