r0 = openat$zero(0xffffffffffffff9c, 0x0, 0x741800, 0x0) io_uring_setup(0x338d, &(0x7f0000000100)={0x0, 0xa468, 0x8}) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) syz_io_uring_setup(0x6e91, &(0x7f0000000440)={0x0, 0x0, 0x2, 0x0, 0x18e}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f00000004c0), &(0x7f0000000500)=0x0) syz_io_uring_submit(0x0, r1, 0x0, 0x0) syz_io_uring_setup(0x38f4, &(0x7f0000000680)={0x0, 0xfa1, 0x4, 0x0, 0x0, 0x0, r0}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000700), &(0x7f0000000740))