r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) write$bt_hci(r0, &(0x7f0000000080)=ANY=[@ANYRES64=r1], 0xa)