r0 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
r1 = fsmount(0xffffffffffffffff, 0x1, 0x1)
splice(r0, &(0x7f00000001c0)=0x5c1, r1, &(0x7f0000000240)=0x4800000000000000, 0x1, 0x4)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0xa01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r3 = syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x9048, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x30, 0xffffffffffffffff, 0x0)
rename(&(0x7f00000000c0)='./file0/../file0\x00', &(0x7f0000000140)='./file0\x00')
r4 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x10000000)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xbb1c9ef561a5e0cf, 0x6000, @fd, 0x7f, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x8)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
dup2(r3, r5)
mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, &(0x7f00000001c0)=ANY=[])
eventfd(0x0)
inotify_init()
syz_io_uring_submit(0x0, r4, &(0x7f0000000040)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd, 0x0, 0x0, 0x7, 0x2, 0x1}, 0x52)
ioctl$BTRFS_IOC_FS_INFO(r2, 0x8400941f, &(0x7f0000000380))