_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 2:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})

11:43:30 executing program 3:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={0x0}}, 0x0)

11:43:30 executing program 0:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 4:
r0 = socket(0x0, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:30 executing program 2:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})

11:43:30 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 0:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000140))

11:43:30 executing program 0:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 2:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})

11:43:30 executing program 4:
r0 = socket(0x0, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:30 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000300)={{r5, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 0:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={&(0x7f0000000100), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:30 executing program 2:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})

11:43:30 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000300)={{r5, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 2:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})

11:43:30 executing program 0:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x0)
syz_clone(0x0, &(0x7f0000000000)="f0be868cf87723c45cb6645bae9afb84dd3b289600d4d2848876bafd3035f8964a9ca7fa961150a6a47e7b92a92758f9c2118158a6fb33e3c60732bec96912d0ef0e21625b9f782368d24d1c36d443eb62c242aa7b034d2c5f", 0x59, 0x0, &(0x7f0000000100), 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:43:30 executing program 4:
r0 = socket(0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:30 executing program 2:
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})

11:43:30 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000300)={{r5, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 4:
r0 = socket(0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:30 executing program 2:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0)

11:43:30 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r4=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000300)={{r4, 0x0, 0x3, [0x1ff, 0x5]}, {r5, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 4:
r0 = socket(0x11, 0x0, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:30 executing program 2:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0)

11:43:30 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r4=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000300)={{r4, 0x0, 0x3, [0x1ff, 0x5]}, {r5, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 4:
socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:30 executing program 0:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x0)
syz_clone(0x0, &(0x7f0000000000)="f0be868cf87723c45cb6645bae9afb84dd3b289600d4d2848876bafd3035f8964a9ca7fa961150a6a47e7b92a92758f9c2118158a6fb33e3c60732bec96912d0ef0e21625b9f782368d24d1c36d443eb62c242aa7b034d2c5f", 0x59, 0x0, &(0x7f0000000100), 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:43:30 executing program 4:
socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:30 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r4=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000300)={{r4, 0x0, 0x3, [0x1ff, 0x5]}, {r5, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 2:
r0 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r0, 0xc1086201, 0x0)

11:43:30 executing program 4:
socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x18, 0x140f, 0x100, 0x70bd2d, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:30 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:30 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x40000)

11:43:30 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x40000)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, 0x0, 0x40000)

11:43:31 executing program 0:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x0)
syz_clone(0x0, &(0x7f0000000000)="f0be868cf87723c45cb6645bae9afb84dd3b289600d4d2848876bafd3035f8964a9ca7fa961150a6a47e7b92a92758f9c2118158a6fb33e3c60732bec96912d0ef0e21625b9f782368d24d1c36d443eb62c242aa7b034d2c5f", 0x59, 0x0, &(0x7f0000000100), 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:31 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000)

11:43:31 executing program 0:
syz_open_dev$media(&(0x7f00000000c0), 0x1, 0x0)
syz_clone(0x0, &(0x7f0000000000)="f0be868cf87723c45cb6645bae9afb84dd3b289600d4d2848876bafd3035f8964a9ca7fa961150a6a47e7b92a92758f9c2118158a6fb33e3c60732bec96912d0ef0e21625b9f782368d24d1c36d443eb62c242aa7b034d2c5f", 0x59, 0x0, &(0x7f0000000100), 0x0)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x40000)

11:43:31 executing program 4:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 0:
syz_clone(0x0, &(0x7f0000000000)="f0be868cf87723c45cb6645bae9afb84dd3b289600d4d2848876bafd3035f8964a9ca7fa961150a6a47e7b92a92758f9c2118158a6fb33e3c60732bec96912d0ef0e21625b9f782368d24d1c36d443eb62c242aa7b034d2c5f", 0x59, 0x0, &(0x7f0000000100), 0x0)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 0:
syz_clone(0x0, 0x0, 0x0, 0x0, &(0x7f0000000100), 0x0)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 0:
syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:31 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r0, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r0})
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r0, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r0})
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r0, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r0, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r0})
r1 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(0x0, 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:32 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, 0x0)
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, 0x0)
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, 0x0)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, 0x0)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, 0x0)
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, 0x0, 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:33 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x0, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(0xffffffffffffffff, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r2=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r2, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r4=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000300)={{r4, 0x0, 0x3, [0x1ff, 0x5]}, {r5, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r4=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000300)={{r4, 0x0, 0x3, [0x1ff, 0x5]}, {r5, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, 0x0)
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r4=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000300)={{r4, 0x0, 0x3, [0x1ff, 0x5]}, {r5, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x5, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:34 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r4=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000300)={{r4, 0x0, 0x3, [0x1ff, 0x5]}, {r5, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r4=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000300)={{r4, 0x0, 0x3, [0x1ff, 0x5]}, {r5, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r4=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, &(0x7f0000000300)={{r4, 0x0, 0x3, [0x1ff, 0x5]}, {r5, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r3, 0x3, [0x1ff, 0x5]}, {r6, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r3, 0x3, [0x1ff, 0x5]}, {r6, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r3, 0x3, [0x1ff, 0x5]}, {r6, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, 0x0, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, 0x0, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000680)=[{}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, 0x0, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:35 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x0, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x2, 0x0, &(0x7f0000000000)=[{}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(0xffffffffffffffff, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, 0x0)
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, 0x0)
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, 0x0)
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(0xffffffffffffffff, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x0, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:36 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x4, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f0000000100)=[{}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:37 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x0, 0x0, 0x0, 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:38 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0x9, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(0xffffffffffffffff, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, 0x0)
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:39 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x5, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:40 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x0, 0x0, 0x0, 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f00000017c0)=[{}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x0, 0x0, 0x0})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:41 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x3, 0x0, &(0x7f00000018c0)=[{}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r3, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r3, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r3})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r3, 0xc0347c03, 0x0)
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{0x80000000, r3, 0x3, [0x1ff, 0x5]}, {r6, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, 0x0, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, 0x0, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, 0x0, 0x3, [0x1ff, 0x5]}, {r6, r3, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x0, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x0, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x0, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x0, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x0, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x0, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {0x80000000, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r3, 0x3, [0x1ff, 0x5]}, {r6, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r3, 0x3, [0x1ff, 0x5]}, {r6, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r4, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r4})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r5=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r4, 0xc0347c03, &(0x7f0000000300)={{r5, r3, 0x3, [0x1ff, 0x5]}, {r6, 0x0, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x0, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x0, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x0, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:42 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x0, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x0, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x0, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x0, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x0, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x0, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x0, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x0, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x0, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(0xffffffffffffffff, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, 0x0)
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x0, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x0, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x0, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x0, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x0, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x0, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x0, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x0, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x0, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x0, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x0, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x0, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:43 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x0, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x0, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x0, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x1010, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x1010, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0)

11:43:44 executing program 1:
r0 = syz_open_dev$media(&(0x7f00000000c0), 0x0, 0x0)
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0x5421, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0})
r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r1, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r1, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r1})
r2 = openat$binderfs_ctrl(0xffffffffffffff9c, &(0x7f00000002c0)='./binderfs/binder-control\x00', 0x802, 0x0)
ioctl$BINDER_CTL_ADD(r2, 0xc1086201, &(0x7f0000000ac0)={'custom0\x00'})
ioctl$MEDIA_IOC_G_TOPOLOGY(r1, 0xc0487c04, &(0x7f00000007c0)={0x0, 0x5, 0x0, &(0x7f0000000100), 0x6, 0x0, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000680)=[{0x0, 0x80000000, 0x0, {<r3=>0x0}}, {}, {}, {}, {0x0, 0x80000000, 0x0, {<r4=>0x0}}, {}, {}, {}, {}, {}], 0x6666666666666cd, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
r5 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000003c0), 0x420400, 0x0)
ioctl$PTP_SYS_OFFSET_PRECISE(r5, 0xc0403d08, &(0x7f0000000400))
ioctl$RTC_PIE_ON(r5, 0x7005)
io_uring_setup(0x2a64, &(0x7f0000000440)={0x0, 0x0, 0x400, 0x0, 0x0, 0x0, r5})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000000a40)={0x0, 0x5, 0x0, &(0x7f0000000840)=[{}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f0000000100)=[{}, {}, {}, {}], 0x8, 0x0, &(0x7f0000000ec0)=[{}, {}, {}, {}, {0x0, <r6=>0x80000000}, {}, {}, {}], 0xa, 0x0, &(0x7f0000000fc0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]})
ioctl$MEDIA_IOC_G_TOPOLOGY(r0, 0xc0487c04, &(0x7f0000001980)={0x0, 0x6, 0x0, &(0x7f0000001200)=[{}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x8, 0x0, &(0x7f00000017c0)=[{}, {}, {}, {0x0, <r7=>0x80000000}, {}, {}, {}, {}], 0x4, 0x0, &(0x7f00000018c0)=[{}, {}, {}, {}]})
ioctl$MEDIA_IOC_SETUP_LINK(r5, 0xc0347c03, &(0x7f0000000300)={{r6, r3, 0x3, [0x1ff, 0x5]}, {r7, r4, 0x2, [0x8, 0x6]}, 0x4, [0x8, 0x5]})
socket$bt_hidp(0x1f, 0x3, 0x6)
ioctl$MEDIA_IOC_SETUP_LINK(r0, 0xc0347c03, &(0x7f0000000080)={{0x80000000, 0x0, 0x2, [0x84, 0x80]}, {0x80000000, 0x0, 0x0, [0x100, 0x2]}, 0x10000000, [0x8001, 0x5]})
mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2000004, 0x10, 0xffffffffffffffff, 0x0)

2022/11/05 11:46:44 SYZFATAL: Manager.NewInput call failed: read tcp 10.128.0.223:46840->10.128.0.169:45979: i/o timeout