r0 = syz_open_dev$loop(&(0x7f0000000040), 0x0, 0x101000) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) r1 = syz_io_uring_setup(0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r1, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) r2 = syz_io_uring_setup(0x1989, &(0x7f0000000000)={0x0, 0x2206, 0x0, 0x0, 0x0, 0x0, r1}, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000000080), &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_PROBE(r2, 0x8, &(0x7f0000000680)={0x0, 0x0, 0x0, '\x00', [{}, {}]}, 0x2) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2)