r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x90) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000900)={{r0}, 0x0, 0x2, @unused=[0x80000001, 0xdda4, 0x9, 0xfffffffffffffe00], @subvolid=0x6}) open$dir(0x0, 0x400000, 0xb0) mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r3, 0x0, 0x10000000c) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00') fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x0, 0x7f}]}, 0x18, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x12) openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4200, 0x20) r5 = io_uring_setup(0x3b95, &(0x7f00000000c0)={0x0, 0xb6b0}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000300)={0x0, 0xaa000000}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2068a04}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x7}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x8, &(0x7f0000000200), 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5, r1, r2], 0x9, 0x0, 0x1}, 0x8)