r0 = syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x0, 0x2, &(0x7f0000000440)=[{&(0x7f0000010000)="eb58906d6b66732e66617400020120000200008000f8000020004000000000000000000001", 0x25}, {0x0, 0x0, 0x4000}], 0x0, &(0x7f00000004c0)=ANY=[])
r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x105142, 0x2)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x24070, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}, 0x4000, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = openat(0xffffffffffffffff, &(0x7f0000000000)='/proc/self/exe\x00', 0x0, 0x90)
ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000900)={{r0}, 0x0, 0x2, @unused=[0x80000001, 0xdda4, 0x9, 0xfffffffffffffe00], @subvolid=0x6})
open$dir(0x0, 0x400000, 0xb0)
mkdirat(r0, &(0x7f0000000040)='./file1\x00', 0x2024ac979a554b1f)
sendfile(r1, r3, 0x0, 0x10000000c)
mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
r4 = syz_open_procfs(0x0, &(0x7f0000000180)='numa_maps\x00')
r5 = openat(0xffffffffffffffff, 0x0, 0x46e2, 0x0)
fsetxattr$security_capability(r5, &(0x7f0000000040), &(0x7f00000008c0)=@v3={0x3000000, [{}, {0x0, 0x7f}]}, 0x18, 0x0)
fcntl$notify(0xffffffffffffffff, 0x402, 0x12)
openat(0xffffffffffffffff, &(0x7f00000001c0)='./file0\x00', 0x4200, 0x20)
r6 = io_uring_setup(0x3b95, &(0x7f00000000c0)={0x0, 0xb6b0})
io_uring_register$IORING_REGISTER_BUFFERS(r6, 0x8, &(0x7f0000000200), 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x4, &(0x7f00000000c0)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, r5, r4, r6, r1, r2], 0x9, 0x0, 0x1}, 0x8)