r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) io_setup(0x5, &(0x7f0000000700)=0x0) r2 = signalfd(0xffffffffffffffff, &(0x7f0000000280), 0x8) io_submit(r1, 0x1, &(0x7f00000006c0)=[&(0x7f0000000000)={0x0, 0x0, 0x0, 0x5, 0x0, r2, 0x0}]) io_cancel(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}, 0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f0000000000)={0x4004800, 0x500, 0x0, 0x0, 0x0, r0, 0x0}])