r0 = getpid() pidfd_open(r0, 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r1, 0x4b72, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, "857c102b14058a271445b0cbc8b1bc22ffb828"}) fork() r2 = fork() waitid(0x1, r2, &(0x7f0000000480), 0x2, 0x0) r3 = accept4$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0xc0000) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r4, 0x5421, &(0x7f0000000080)=0x200) socket$inet_icmp_raw(0x2, 0x3, 0x1) splice(0xffffffffffffffff, 0x0, r3, 0x0, 0x7ff, 0xa) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f0000000100)=""/109, 0x6d}], 0x1, 0x0, 0x0) bind$bt_hci(0xffffffffffffffff, &(0x7f00000000c0), 0x6) r5 = syz_io_uring_setup(0x7f73, &(0x7f0000000300)={0x0, 0x3, 0x2, 0x0, 0x2000000, 0x0, r4}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000040), &(0x7f0000000140)) openat$snapshot(0xffffffffffffff9c, &(0x7f00000007c0), 0x0, 0x0) close_range(r5, 0xffffffffffffffff, 0x0)