ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, &(0x7f0000000000)={0xfffffffffffffb72, 0x0, 0x0, 0x0, 0x3, [0xc44]}) r0 = syz_io_uring_setup(0x1af1, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1d5}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f00000000c0), &(0x7f0000000100)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000140)=@IORING_OP_CLOSE={0x13, 0x1}, 0x0) ioctl$HIDIOCGUCODE(0xffffffffffffffff, 0xc018480d, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000003c0)='./binderfs2/binder-control\x00', 0x0, 0x0) fsetxattr$security_capability(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x3) fsetxattr$security_capability(r0, &(0x7f0000000600), &(0x7f0000000640)=@v2={0x2000000, [{0x7ff, 0xe8}, {0x4d}]}, 0x14, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000680)=0xc18, 0x4) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) execveat(0xffffffffffffffff, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001740)=[&(0x7f0000001700)='security.capability\x00'], &(0x7f0000001840)=[&(0x7f00000017c0)='@-@\\*#+\\(\x00', &(0x7f0000001800)='%^]$@\'[,$(\x00'], 0x1000)