r0 = syz_io_uring_setup(0x3862, &(0x7f00000002c0), &(0x7f00000a0000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f00000001c0)=<r2=>0x0)
r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r3, 0x80, &(0x7f0000000240)=@ll={0x11, 0x0, 0x0, 0x1, 0x9, 0x6, @local}}, 0x0)
r4 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_io_uring_submit(r4, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0)
perf_event_open(&(0x7f0000000140)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, @perf_bp={0x0}, 0x0, 0xe8d, 0x100, 0x0, 0x0, 0xc4d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(0xffffffffffffffff, 0xc018937e, &(0x7f00000000c0)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32, @ANYBLOB="009e7b00000000002e2f666c6c653000"])
pread64(0xffffffffffffffff, &(0x7f0000001100)=""/4095, 0x20001be3, 0xf0ff1f)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_TEE={0x21, 0x3, 0x0, @fd_index=0x5, 0x0, 0x0, 0x401, 0x0, 0x1, {0x0, r5}}, 0xb7)
execveat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', &(0x7f0000000380)=[&(0x7f00000000c0)='\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='\x00', &(0x7f0000000180)='\\]\'%{@\xcb-#@\'+\\(*\x00', &(0x7f00000005c0)='\x00\x00\x00\x00\x00\x00\x00\xc7.w\xa5\x7f\b\x1e\'\xd1l\xcf\x93\xca\xe2\x14\x85\x12\x9b+\xc8\xfa\xf8\xaci\x04e=oV\xa4\x00\x88\xe5\x12\xa2!\xfc\xb8W\xfb\x00\xe3<\xaa\xae\xd6\xf4\x1a5Fi\xf2\xaa\x13\xaev\x92=I\t\x00\xf3FI\x126\xf8\xd1{_\x8c\xb4\xd3>\xcf\xdc\xa1\xbf\xb0\xd7\xcf\xe7\xc0\x83\xa4\x8f\xcf\xea\x17MK\xe4\x91\xcb\xb5\xc0\xd7\"Z#Z\xb2\xaa\x8aP5\xe51\xf8i\xab\x94\xc1\x95B\xfd*E?\xc1\xffcQ>>@\xd6\xcf\xacG\xfbq\xb78\xf9\x9c\x13\xe7R\xa4y\x9b\x9f;W\xce\xd1\x12\xd1\x01\xaf\x1f\xcc\xbfG\x03\xa1\xc7\xd8\xce\x93\xd1\x10\x96\a`\x19\xceEP\x0e\xf8\xb5\x91\xa75\xd4W]J(R\x8aIoO\x17T\xa7j\"sGd\xb3\fo7e1\xd2s\xc5\xb8\xb2\xcb\xe4\xa5x\x95`\xc1\x06\x97L\x03\vH\xc5D\x87', &(0x7f0000000200)=':', &(0x7f0000000580)='#*&$\x00', &(0x7f0000000280)='{%.%{!#}&}\xa1(&*.$!$\x00', &(0x7f00000002c0)='{K:+,!#\x00', &(0x7f0000000340)='\xaf#/^&\\+\x00'], &(0x7f0000000540)=[&(0x7f0000000400)='\x00', &(0x7f0000000440)='\x00', &(0x7f0000000480)='%\x00', &(0x7f00000004c0)='-$+\x00', &(0x7f0000000500)='#\'\x00'], 0x100)
r6 = memfd_create(&(0x7f0000000040)='\x00\'\'x\xe0\x1c\xaa\x00d\x88\xc4p\xb0\x89`\xe4\xc6O\xca\x1d\b6\xdd\xda\xacQB\xa7\x8d\xb7\x01Q\xc6\x0fG/\xf9\n', 0x0)
mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2, 0x1f012, r6, 0x0)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x6)