r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = syz_io_uring_setup(0x4d4f, &(0x7f0000000180), &(0x7f0000400000/0xc00000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000140)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) io_uring_enter(r1, 0x58ab, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000080))