r0 = syz_io_uring_setup(0x7bb2, &(0x7f00000002c0)={0x0, 0xe14d, 0x0, 0x2}, &(0x7f0000ff8000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000000200)=<r1=>0x0, &(0x7f0000000140)=<r2=>0x0)
syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x9, 0x0, &(0x7f0000001cc0)=[{0x0}, {&(0x7f0000001b80)=""/142, 0x8e}], 0x2}, 0x0)
syz_io_uring_setup(0x54e5, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3, 0xfffffffe}, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000fec000/0x14000)=nil, 0x0, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={<r3=>0xffffffffffffffff, <r4=>0xffffffffffffffff})
pipe2(&(0x7f0000000180)={<r5=>0xffffffffffffffff}, 0x0)
syz_io_uring_submit(0x0, 0x0, &(0x7f0000000540)=@IORING_OP_FILES_UPDATE={0x14, 0x1, 0x0, 0x0, 0x1, &(0x7f0000000500)=[r3, 0xffffffffffffffff, r0, 0xffffffffffffffff, 0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff], 0x8, 0x0, 0x1}, 0x800)
r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='mounts\x00')
ioctl$BTRFS_IOC_QGROUP_LIMIT(r5, 0x8030942b, &(0x7f00000001c0)={0x0, {0x2, 0x2, 0x5, 0x5a, 0x8}})
readv(r6, &(0x7f0000000280)=[{&(0x7f0000001e00)=""/4098, 0x1002}], 0x1)
r7 = syz_open_dev$ptys(0xc, 0x3, 0x1)
getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={<r8=>0x0}, &(0x7f0000000340)=0xc)
fcntl$setown(r7, 0x8, r8)
r9 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x100000e, 0x13, r0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x2c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x2e}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}]]}, 0x2c}, 0x1, 0x0, 0x0, 0xc4}, 0x40004)
perf_event_open(&(0x7f0000000080)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48ed, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_io_uring_submit(r9, r2, &(0x7f0000000040)=@IORING_OP_MADVISE={0x19, 0x5, 0x0, 0x0, 0x0, &(0x7f0000ff6000/0x1000)=nil, 0x1000, 0x0, 0x1}, 0x6)
syz_io_uring_submit(r9, r2, &(0x7f0000000100)=@IORING_OP_ACCEPT={0xd, 0x3, 0x0, 0xffffffffffffffff, 0x0}, 0x8001)
io_uring_enter(r0, 0x58ab, 0x0, 0x0, 0x0, 0x0)