r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x2, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x6}]}, 0x10)
r1 = socket$packet(0x11, 0x2, 0x300)
setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000400)=@req={0x10801, 0xfffffa79, 0x5a7, 0x2}, 0x10)
poll(&(0x7f0000000140)=[{r1}], 0x1, 0x0)
getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000480)=""/129, &(0x7f00000003c0)=0x81)
socket$nl_route(0x10, 0x3, 0x0)
r2 = socket$nl_route(0x10, 0x3, 0x0)
getsockopt(r2, 0x8, 0x800, &(0x7f0000000240)=""/245, &(0x7f0000000140)=0xf5)
r3 = openat$sr(0xffffffffffffff9c, &(0x7f0000000000), 0x4840, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0)
r5 = syz_open_dev$sg(&(0x7f0000002ac0), 0x0, 0x0)
r6 = dup(r5)
r7 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1538a007c81ba33b, 0x12, r6, 0x0)
syz_memcpy_off$IO_URING_METADATA_FLAGS(r7, 0x118, &(0x7f0000000080), 0x0, 0x4)
syz_io_uring_submit(r4, 0x0, 0x0, 0x0)
fork()