r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f0000001500)=ANY=[])
openat(r0, &(0x7f0000000240)='./file0\x00', 0x2400, 0x140)
r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x0)
openat(r1, &(0x7f00000000c0)='./file0\x00', 0x440800, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$unix(0x1, 0x2, 0x0)
r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x2000000, 0x40010, r1, 0x8000000)
connect$unix(r2, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e)
syz_io_uring_submit(r3, 0x0, &(0x7f0000000140)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0, 0x0, {0x80}}, 0x80)
bind$unix(r2, &(0x7f0000000040)=@file={0x1, './file0\x00'}, 0x6e)
r4 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x222001, 0x0)
sendmsg$unix(r2, &(0x7f0000000440)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000400)=[@rights={{0x14, 0x1, 0x1, [r4]}}], 0x18}, 0x0)
openat(r4, &(0x7f0000000040)='./file1\x00', 0x2000, 0x8)
r5 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x0)
sendfile(r1, r5, 0x0, 0x10000000c)