r0 = syz_io_uring_setup(0x21, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f00000b0000)=nil, &(0x7f0000000140)=<r1=>0x0, &(0x7f0000002580)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000340)=@IORING_OP_ASYNC_CANCEL, 0x0)
r3 = socket$nl_audit(0x10, 0x3, 0x9)
syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_RECV=@pass_buffer={0x1b, 0x0, 0x0, r3, 0x0, 0x0}, 0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_REMOVE, 0x155b1c2b)
io_uring_enter(r0, 0x76d3, 0x0, 0x0, 0x0, 0x0)