ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0)
perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000780), 0x1}, 0x1a01}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
r0 = syz_mount_image$ext4(0x0, &(0x7f0000000280)='./file0\x00', 0x40ffffffffffff, 0x0, 0x0, 0x9048, 0x0)
r1 = mmap$IORING_OFF_SQES(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8, 0x2010, 0xffffffffffffffff, 0x10000000)
io_uring_register$IORING_UNREGISTER_BUFFERS(0xffffffffffffffff, 0x1, 0x0, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_READV=@use_registered_buffer={0x1, 0xbb1c9ef561a5e0cf, 0x6000, @fd, 0x7f, 0x0, 0x0, 0x2, 0x0, {0x1}}, 0x0)
r2 = creat(&(0x7f00000007c0)='./file0/../file0\x00', 0x4)
openat(r2, &(0x7f0000000080)='./file1\x00', 0xc0000, 0x0)
dup2(r0, 0xffffffffffffffff)
mount$9p_unix(&(0x7f00000002c0)='./file0/../file0\x00', &(0x7f0000000300)='./file0\x00', &(0x7f0000000340), 0x1001000, 0x0)
ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000940)=ANY=[@ANYBLOB="0100000001000000180000000afa91692ce65e11a0f766aa8f31912fbf7db594ec0bb1304f212385bc0ecf8845ca814b11320e58d5d029bc939a4ea1977c18c704a7268661c0ec1dbf9f31d3afefe7dd8c1a1f4cad7fbaf5b546e2391ad59eafb90f7161559ed22492237336f5942de5a4af436fc693503900", @ANYRES32, @ANYBLOB="00000001000000002e2f66696c653200", @ANYRES64=r0])
syz_io_uring_submit(0x0, r1, &(0x7f0000000040)=@IORING_OP_FILES_UPDATE={0x14, 0x2, 0x0, 0x0, 0x800, &(0x7f0000000a00)=[0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x6}, 0x7)
mount$bind(&(0x7f0000000180)='./file1\x00', &(0x7f0000000200)='./file0\x00', 0x0, 0x20, 0x0)
mount$bind(&(0x7f0000000100)='./file1\x00', &(0x7f0000000240)='./file1\x00', &(0x7f0000000840), 0x0, 0x0)