r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x1)
r1 = creat(0x0, 0x0)
r2 = perf_event_open(&(0x7f0000001d80)={0x1, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = syz_open_dev$sg(&(0x7f0000000400), 0x0, 0x2001)
write$binfmt_elf64(r3, &(0x7f0000001e00)=ANY=[@ANYBLOB="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"/1833], 0x712)
timer_create(0x3, &(0x7f0000000000)={0x0, 0x1c, 0x0, @tid=0xffffffffffffffff}, &(0x7f0000000040)=<r4=>0x0)
timer_settime(r4, 0x0, &(0x7f0000000480)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0)
r5 = syz_open_dev$vcsu(0x0, 0x0, 0x0)
syz_io_uring_setup(0x7781, &(0x7f0000000400)={0x0, 0x69ec, 0x10, 0x0, 0x3aa, 0x0, r5}, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x0, &(0x7f00000004c0))
r6 = syz_open_dev$mouse(&(0x7f0000000080), 0x8, 0x200c01)
ioctl$SG_IO(r6, 0x2285, &(0x7f0000000840)={0x0, 0xfffffffffffffffd, 0xaa, 0x9, @buffer={0x0, 0xfd, &(0x7f0000000600)=""/253}, &(0x7f0000000700)="906e33f2d56fa859003b6e168fefd2f61954328e140f3e89652e35514380b6ab86dc759cc9782ecb1c8874be37b6dc64ccabb8b39f6276b138815c1b48f6571455c083298e933f8d843b12bfebbb6a121d0bf96a26c5c05644c468d55625f2de9c09dcce2db9a177b88ebce9f1b01e79a607855de220e717cd165e67254f0691b9fe7216b3ae6d265145b93bba36d9b6d3472a574d4a27d7c012208524b9896f5e48f83bab78fc676ddc", &(0x7f00000007c0)=""/121, 0x6f01, 0x13, 0x0, &(0x7f0000000300)})
setsockopt$inet6_int(r5, 0x29, 0x35, &(0x7f00000001c0)=0xd7df, 0x4)
socket$inet6_udplite(0xa, 0x2, 0x88)
r7 = socket$netlink(0x10, 0x3, 0x0)
sendmsg$nl_generic(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x28, 0x1e, 0xe21, 0x0, 0x0, {0x7}, [@nested={0x14, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x6, 0x37, 0x0, 0x0, @str='/\x00'}]}]}, 0x28}}, 0x0)
fcntl$dupfd(r2, 0x406, r7)
io_submit(0x0, 0x3, &(0x7f00000003c0)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x200, 0xffffffffffffffff, &(0x7f00000000c0)="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", 0xfa, 0x1, 0x0, 0x2, r0}, 0x0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x8, r0, &(0x7f0000000500)="dbb302c4031f0b8956ac6cd15ddc46310efaf6f592e8a6a9e1c208400f05651cd3db62f95d966b1a741ba1440beb5d66181ae0ffc48ab3aa9f3da94d52286aa506fd9df1d141ab7559875be3750e21bdffe0b7052781fe26ae4f448a3dc452b108054c38d0e81230b087e77190a6ed1a435f21c11ea4e18b1a1b808f4bedd0712bd7e66274b2e25e9da9a3c41413d0158efef46b6ff798f5654de494c84b37b7ed2f8d5b3587eac30437d06f9df5445f5031787ae7d898d56113133cddbfd187582bfadb7df18d5c30365cc73f8407378dc01ae492710ffa5d4cafa5829f120813d0fc2b47caf9e0bafe00e7d4df8262c14bf0", 0xf3, 0xffff, 0x0, 0x2, r1}])
ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f00000008c0)={0x0, 0x8, 0x1000, 0x1})