r0 = syz_open_dev$loop(&(0x7f0000000000), 0x3, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) r1 = syz_open_dev$loop(&(0x7f0000001080), 0x5b8, 0x0) ioctl$LOOP_GET_STATUS(0xffffffffffffffff, 0x4c03, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, 0x0, 0x0) ioctl$HDIO_GETGEO(r0, 0x301, &(0x7f0000001280)) openat$rfkill(0xffffffffffffff9c, &(0x7f00000012c0), 0x391400, 0x0) r2 = io_uring_setup(0x7b1, &(0x7f0000001400)={0x0, 0x25c5, 0x10, 0x1}) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3000000, 0x2010, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_VLAN(0xffffffffffffffff, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f00000014c0)={0x2c, 0x0, 0x0, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x41000}, 0x80) syz_io_uring_setup(0x26f9, &(0x7f0000001580)={0x0, 0x316f, 0x0, 0x0, 0x18e, 0x0, r2}, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000001600), &(0x7f0000001640)) ioctl$LOOP_SET_CAPACITY(r1, 0x4c07) syz_mount_image$nfs(&(0x7f00000026c0), &(0x7f0000002700)='./file0\x00', 0x0, 0x3, &(0x7f0000003c00)=[{0x0, 0x0, 0xf6e2}, {&(0x7f0000002780), 0x0, 0xfffffffffffffff7}, {&(0x7f00000029c0)}], 0x40000, &(0x7f0000003cc0)={[{'>,+\xa1\xf5'}, {'\x00'}, {}, {',)'}], [{@func={'func', 0x3d, 'BPRM_CHECK'}}]}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000003d00)={{0x0, 0x0, 0xfff, 0x7, 0x0, 0xa33, 0x6, 0x0, 0x5, 0x9, 0x0, 0xffff, 0x618, 0xfffffffffffffc01, 0x1}}) sendmsg$NL80211_CMD_ADD_TX_TS(0xffffffffffffffff, &(0x7f0000004dc0)={&(0x7f0000004d00)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x0)