r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1)
r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r2 = dup2(r1, r1)
r3 = io_uring_setup(0x3, &(0x7f0000000240))
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000180)=@IORING_OP_CLOSE={0x13, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0)
dup2(r3, r2)
ioctl$sock_bt_hci(r2, 0x400448e7, &(0x7f0000000500)="cca783b03bafe229da80143fd33a5daf3e910c05a4fcb2b44a599e17331e3693db9c8dfabd4b605e38d995c94646eaa0e34ebc938191da33f2ff69e60da4d40563e152ab184ca9a8bf58d3027b5e5bb01896fd5be43c2a35c5e930de772a831b3eadf96756e95902a3d10a9016ababec7bca81a8c619a0ce6c886cc6d704d01ee52a7d8894745e4f1596317dbc6f2ca1b7fd85aae5980c8eff9693e97d3440f5c255a4a3eb80c6fbc4c40bd6c66a5253ee528de54fa3e65bf3e9ad0f4f780ba509f87aabf5fff832243be7020cbe1fe7")
bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffffffffffffffff}, 0x6)
perf_event_open(&(0x7f0000000480)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4307, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0xfff, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = syz_io_uring_setup(0x3a75, &(0x7f0000000340)={0x0, 0x0, 0x10, 0x0, 0x100}, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)=<r5=>0x0, &(0x7f0000000100)=<r6=>0x0)
syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x18}, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r4, 0x0)
r7 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x13, r4, 0x8000000)
syz_io_uring_submit(r7, r6, &(0x7f00000002c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x4, 0x0, @fd, 0x0, 0x0}, 0x80000001)
creat(&(0x7f0000000080)='./file0\x00', 0x0)
openat(0xffffffffffffffff, &(0x7f0000000280)='/proc/self/exe\x00', 0x0, 0x0)
unlink(&(0x7f0000000140)='./file0\x00')
ioctl$FS_IOC_GETFLAGS(0xffffffffffffffff, 0x80086601, &(0x7f00000000c0))
io_uring_enter(r4, 0x58ab, 0x0, 0x0, 0x0, 0x300)