r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[]) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2) perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x90) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000900)={{r0}, 0x0, 0x2, @unused=[0x80000001, 0xdda4, 0x9, 0xfffffffffffffe00], @subvolid=0x6}) open$dir(0x0, 0x400000, 0xb0) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f) sendfile(r1, r2, 0x0, 0x10000000c) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_READY(0xffffffffffffffff, 0xc0189376, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x0, 0x7f}]}, 0x18, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x12) io_uring_setup(0x0, &(0x7f00000000c0)={0x0, 0xb6b0}) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, &(0x7f0000000300)={0x0, 0xaa000000}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2068a04}, 0xc, &(0x7f0000000280)={0x0, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x4)