0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x1c}}, 0x0)
sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r3, 0xe7a035cf4856fee5}, 0x14}}, 0x0)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f00000002c0)={0x0, 'veth0_virt_wifi\x00', {0x3}, 0x7})
sendmsg$FOU_CMD_ADD(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, r3, 0x400, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @loopback}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x4000000)
r4 = socket(0x10, 0x2, 0x0)
r5 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$SNDRV_PCM_IOCTL_DELAY(r5, 0x80084121, &(0x7f0000000080))
getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc)
r6 = fcntl$dupfd(0xffffffffffffffff, 0x0, r4)
ioctl$UI_SET_EVBIT(r6, 0x40045564, 0x1d)
ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x80000001, <r7=>0x0, 0x2, 0x796b})
ioctl$DRM_IOCTL_AGP_BIND(r6, 0x40106436, &(0x7f0000000040)={r7, 0x2})

15:53:24 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r4 = gettid()
waitid(0x0, r4, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r2)

15:53:24 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:24 executing program 3:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:24 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:24 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:24 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:25 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  327.079453][   T27] kauditd_printk_skb: 52 callbacks suppressed
[  327.079472][   T27] audit: type=1804 audit(1583855605.076:230): pid=12894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/82/bus" dev="sda1" ino=16755 res=1
[  327.139837][   T27] audit: type=1800 audit(1583855605.076:231): pid=12894 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16755 res=0
15:53:25 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:25 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

[  327.263020][   T27] audit: type=1804 audit(1583855605.226:232): pid=12896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/53/bus" dev="sda1" ino=16746 res=1
15:53:25 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  327.491837][   T27] audit: type=1800 audit(1583855605.226:233): pid=12896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16746 res=0
15:53:25 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(0xffffffffffffffff, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r4 = gettid()
waitid(0x0, r4, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(0xffffffffffffffff, 0x8, 0x0)
sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r2)

15:53:25 executing program 3:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

[  327.598951][   T27] audit: type=1804 audit(1583855605.346:234): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/63/bus" dev="sda1" ino=16751 res=1
15:53:25 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  327.676956][   T27] audit: type=1800 audit(1583855605.346:235): pid=13000 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16751 res=0
15:53:25 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:25 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  327.846156][   T27] audit: type=1804 audit(1583855605.576:236): pid=13005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/6/bus" dev="sda1" ino=16577 res=1
[  327.970862][   T27] audit: type=1800 audit(1583855605.576:237): pid=13005 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16577 res=0
[  328.049348][   T27] audit: type=1804 audit(1583855605.736:238): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/54/bus" dev="sda1" ino=16657 res=1
15:53:26 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

[  328.081026][   T27] audit: type=1800 audit(1583855605.736:239): pid=13008 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16657 res=0
15:53:26 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:26 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:26 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:26 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:26 executing program 3:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:26 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:26 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:26 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:26 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:26 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:27 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:27 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:27 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:27 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:27 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:27 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:27 executing program 3:
r0 = socket$kcm(0x2, 0x0, 0x0)
r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r1, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x401c5820, &(0x7f0000000040))
socket$kcm(0x2, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000003c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
close(r2)
socket$kcm(0x2b, 0x0, 0x0)
openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
mkdirat$cgroup(0xffffffffffffffff, 0x0, 0x1ff)
write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0)
close(0xffffffffffffffff)
bpf$OBJ_GET_MAP(0x7, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40305839, &(0x7f0000000040))
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000900)={0x0, 0x0, 0x0, &(0x7f0000000700)='syzkaller\x00', 0x0, 0xc7, &(0x7f0000000780)=""/199, 0x0, 0x0, [], 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f0000000880), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x78)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
close(r0)

15:53:27 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:27 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:27 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:27 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:27 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x802102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x80000000, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
tkill(r0, 0x2d)
ptrace$cont(0x18, r0, 0x0, 0x0)
ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x0, 0x3, 0x2a})
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl(r1, 0x1000008912, &(0x7f0000000000)="080db5055e0bcfe847a071")
ptrace$cont(0x9, r0, 0x0, 0x0)

15:53:27 executing program 0:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:27 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:28 executing program 3:
r0 = socket$inet6_udplite(0xa, 0x2, 0x88)
sendmmsg$inet6(r0, &(0x7f0000001240)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @remote}, 0x1c, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="2400000000000000290000003200000000000000000000000000000000000001", @ANYRES32=0x0], 0x24}}], 0x1, 0x0)

15:53:28 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:28 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:28 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:28 executing program 0:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:28 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:28 executing program 3:
socket$nl_route(0x10, 0x3, 0x0)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[]}}, 0x0)
bind(0xffffffffffffffff, 0x0, 0x0)
getsockname$packet(0xffffffffffffffff, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x30}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd}, 0x48)

15:53:28 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:28 executing program 0:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:28 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:28 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:28 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:28 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000180)=0x2594, 0x4)
sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c)
setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f00000001c0)=0x401, 0x4)
recvmsg(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x2000)

15:53:28 executing program 0:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:28 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  330.885686][T13662] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based  firewall rule not found. Use the iptables CT target to attach helpers instead.
15:53:28 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:29 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:29 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:29 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:29 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000740)='/dev/rtc0\x00', 0x0, 0x0)
ioctl$RTC_AIE_ON(r2, 0x7001)

15:53:29 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:29 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:29 executing program 3:
r0 = socket$kcm(0x2, 0x5, 0x0)
socketpair(0x0, 0x4, 0x80, &(0x7f0000000240)={<r1=>0xffffffffffffffff})
setsockopt$sock_attach_bpf(r1, 0x84, 0x1e, &(0x7f0000000100), 0x4)
r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
write$cgroup_int(r2, &(0x7f0000000200), 0x400086)
r4 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0)
ioctl$TUNATTACHFILTER(r4, 0x401054d5, 0x0)
mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/syz1\x00', 0x1ff)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700)
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x7fff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$PERF_EVENT_IOC_PERIOD(r3, 0x401c5820, &(0x7f0000000040))
socket$kcm(0x2, 0x2, 0x0)
close(r3)
socket$kcm(0x2b, 0x0, 0x0)
r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.stat\x00', 0x26e1, 0x0)
setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x40082406, &(0x7f0000000040)='cpuset')
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
gettid()
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000400)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0)
mkdirat$cgroup(r6, 0x0, 0x1ff)
ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r6, 0x40086602, 0x40000b)
write$cgroup_subtree(r6, 0x0, 0x0)
ioctl$TUNSETFILTEREBPF(r6, 0x6609, 0x0)
r7 = perf_event_open(&(0x7f0000000200)={0x1, 0x70, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x81}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(r7)
perf_event_open$cgroup(0x0, r6, 0xe, 0xffffffffffffffff, 0x4)
r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000240)={0x0}, 0x10)
recvmsg(0xffffffffffffffff, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002980)=[{0x0}, {0x0}], 0x2}, 0x2000)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xc0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=0x7, 0x0, <r9=>0x0, 0x0, &(0x7f0000000480)={0x2, 0x4}, 0x0, 0x0, &(0x7f00000004c0)={0x1, 0x0, 0x6, 0x3ff}, &(0x7f0000000500), 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=0x7}}, 0x10)
r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40305839, &(0x7f0000000040))
r11 = openat$cgroup_ro(r10, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700)
ioctl$PERF_EVENT_IOC_SET_FILTER(r11, 0x40082406, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x8a9e6d5097b8b4f5, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYRES32=r8, @ANYBLOB], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, [], 0x0, 0x2, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x6, 0x2}, 0x10, r9}, 0x78)
r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xc, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x1a001000050}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x7}, @exit]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000100)={r12, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000040), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x2, 0x0, 0x0, &(0x7f00000006c0)='syzkaller\x00', 0x8, 0x42, &(0x7f0000000700)=""/66, 0x41000, 0x3, [], 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000007c0)={0x0, 0x0, 0xd10d, 0x2}, 0x10}, 0x78)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r5, 0xc0, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x35)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
close(r0)

15:53:29 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:29 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:29 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:29 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:29 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800})

15:53:29 executing program 3:
unshare(0x400)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00')
exit(0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x0, 0xe8}]}, 0x10)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f0000cab000))
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f00000007c0)="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", 0x1b9}], 0x3)
timer_create(0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
r6 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000300)={0x0, @hci={0x1f, 0x7, 0x3}, @sco={0x1f, @none}, @llc={0x1a, 0x2, 0xb4, 0x2c, 0x0, 0x0, @dev={[], 0x1b}}, 0x53, 0x0, 0x0, 0x0, 0x80ff, 0x0, 0x7, 0x1, 0x8001})

15:53:30 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:30 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:30 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x43732e5398416f1a})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)={'tunl0\x00', 0x400})
ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000040)={'wg0\x00', 0x400})

15:53:30 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:30 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  332.164003][   T27] kauditd_printk_skb: 64 callbacks suppressed
[  332.164022][   T27] audit: type=1804 audit(1583855610.166:304): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/75/bus" dev="sda1" ino=16706 res=1
15:53:30 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800})

[  332.315757][   T27] audit: type=1800 audit(1583855610.216:305): pid=14128 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16706 res=0
15:53:30 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  332.439277][   T27] audit: type=1804 audit(1583855610.356:306): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/93/bus" dev="sda1" ino=16742 res=1
15:53:30 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x4000000000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x62a, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
ioctl$FITRIM(r4, 0xc0185879, &(0x7f0000000100)={0x0, 0x80000000})

15:53:30 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  332.543192][   T27] audit: type=1800 audit(1583855610.356:307): pid=14139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16742 res=0
[  332.592117][   T27] audit: type=1804 audit(1583855610.406:308): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/65/bus" dev="sda1" ino=16760 res=1
15:53:30 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  332.764194][   T27] audit: type=1800 audit(1583855610.406:309): pid=14164 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16760 res=0
15:53:30 executing program 3:
r0 = socket$inet6(0xa, 0x2000000080803, 0x84)
r1 = socket$nl_xfrm(0x10, 0x3, 0x6)
bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in6=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x33}, 0x0, @in6, 0x0, 0x0, 0x0, 0x8464}}, 0xe8)
r2 = socket$inet6_tcp(0xa, 0x1, 0x0)
r3 = fcntl$dupfd(r2, 0x0, r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c)

15:53:30 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  332.879375][   T27] audit: type=1804 audit(1583855610.586:310): pid=14349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/76/bus" dev="sda1" ino=16761 res=1
15:53:31 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:31 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800})

[  333.080859][   T27] audit: type=1800 audit(1583855610.586:311): pid=14349 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16761 res=0
15:53:31 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:31 executing program 3:
prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = gettid()
wait4(0x0, 0x0, 0x40000000, 0x0)
vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000480)="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", 0x128}], 0x4, 0x0)
ptrace$setopts(0x4206, r0, 0x0, 0x0)
sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff9b, 0x0, 0x0, 0x0, 0x45}, 0x0)
tkill(r0, 0x3c)
ptrace$cont(0x18, r0, 0x0, 0x0)
ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080))
ptrace$cont(0x1f, r0, 0x0, 0x0)

[  333.243946][   T27] audit: type=1804 audit(1583855610.606:312): pid=14348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/15/bus" dev="sda1" ino=16762 res=1
15:53:31 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  333.348990][   T27] audit: type=1800 audit(1583855610.616:313): pid=14348 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16762 res=0
15:53:31 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:31 executing program 3:
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x420000015001})
r1 = socket$netlink(0x10, 0x3, 0x0)
ioctl$sock_inet_SIOCSIFADDR(r1, 0x8914, &(0x7f0000000140)={'syzkaller1\x00', {0x7, 0x0, @remote}})
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$tun(r0, &(0x7f00000002c0)={@void, @val, @mpls={[], @ipv6=@icmpv6={0x0, 0x6, "9eef7b", 0x31, 0x2c, 0x0, @remote, @mcast2, {[], @param_prob={0x3, 0x0, 0x0, 0x0, {0x0, 0x6, "6595c3", 0x0, 0x0, 0x0, @mcast2, @empty, [], '9'}}}}}}, 0x63)

15:53:31 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:31 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:31 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:31 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:32 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:32 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(0xffffffffffffffff)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:32 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:32 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:32 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:32 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(0xffffffffffffffff)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:32 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:32 executing program 3:
unshare(0x400)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000002380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0)
pipe(&(0x7f0000000200)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='sched\x00')
exit(0x0)
sched_setattr(0x0, &(0x7f00000002c0)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
r4 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d)
bind$inet(r4, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x0, 0xe8}]}, 0x10)
r5 = socket(0x10, 0x2, 0x0)
getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, <r6=>0x0}, &(0x7f0000cab000)=0xc)
setreuid(0x0, 0x0)
setxattr$security_capability(&(0x7f0000000080)='./file0\x00', &(0x7f0000000380)='security.capability\x00', &(0x7f00000003c0)=@v3={0x3000000, [{0x241, 0xfffffff7}, {0xfde6, 0x1}], r6}, 0x18, 0x3)
sendto$inet(r4, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000600)=0xda6, 0x4)
writev(r4, &(0x7f0000000780)=[{&(0x7f0000000100)="dff548771d77ce8786aca76dda6fb054ab8ea73799d7293eda90ba41a2db81fab55b5415692300a8e64bca2f60e1717f85f06a6bbca90f392b04f34940db7ffccc33ed6ea82296de9683c9e360cd1c477304bd8f9bd74d44a4c7d1c7e625a86cd54b72c5745f475a772b84977a6b05381dbe6259bc510f0f70c3e9946a78c7b5a19e97447799d930f9623b", 0x8b}, {&(0x7f00000001c0)="96431fb1cb119741590ad657dc5e5ce3e5fe9f1f639e6a18bc7b6c1d0b424eb306f34cf2429c62c0fdefbae36740a7169721af852826d7f14b6cae8af86507ff78a1dda991aea5952f43e7e0146a3c035f0113d617240e8940c60cdf3400193bbe3a0c0b1eae5799db27b4ee9c13475210defa4dac9d784e0c89135b82b321f8e43d7a5db9ab1bfd319f472a94", 0x8d}, {&(0x7f00000007c0)="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", 0x1b9}], 0x3)
timer_create(0x0, 0x0, 0x0)
sendto$inet(r4, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600f53f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95c25a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x68)
sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0)
ptrace$setopts(0xffffffffffffffff, 0x0, 0x0, 0x0)
r7 = socket$inet6_tcp(0xa, 0x1, 0x0)
bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c)
listen(r7, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)

15:53:32 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:32 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:32 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(0xffffffffffffffff)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:32 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:32 executing program 3:
sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x70}}, 0x0)
r0 = socket$nl_netfilter(0x10, 0x3, 0xc)
sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0xb, 0x6000000}, 0x0)

15:53:33 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x0, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:33 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:33 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:33 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r3 = timerfd_create(0x9, 0x0)
dup2(r2, r3)

15:53:33 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x0, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:33 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:33 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:33 executing program 3:
syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x0, 0x1, &(0x7f0000000380)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270fff8", 0xffdf}], 0x0, 0x0)
open(&(0x7f00000003c0)='./file0/f.le.\x00', 0x0, 0x0)
creat(&(0x7f00000004c0)='./file0/f.le.\x00', 0x0)

15:53:33 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:33 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:33 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x0, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:33 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:33 executing program 3:
r0 = socket$inet_udplite(0x2, 0x2, 0x88)
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r3 = timerfd_create(0x0, 0x0)
dup2(r2, r3)

15:53:33 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:33 executing program 5:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:33 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:34 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:34 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x69, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480)='nl80211\x00')
sendmsg$NL80211_CMD_GET_WIPHY(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="1f0300000000000000000100000008000300eea516299da186ff7e70094dde9d756f99e3a8cf390b09f6ecb02f6838b272b194f9bcfba6d5af0b1f55cb66b29b136d6686087db1f6d5260037312ad70d9d348f6ea44c9e58360e660f3c60207f2818f79aeee06a46a8b5ee9d65c9817e0f57bf9a8f86aecb27b7b1d14b3867ca45da8bf02ec5da5f0eefaa99d683846ce4039180be1de204db3a2257ac0eea004508346d8f6c66117e7b6b1bf023e4caba89e15d2fdaeb3e2b15c97331fd33999b75c94d39d96ccfb6e5724bf7bb5a60ac4386a99061890756992427cc616364e1447bd21668650a74df33db9a026ff6c3a273b1f7a6667fe8439006e848233dd3d7a890fe", @ANYRES32, @ANYBLOB], 0x1c}}, 0x0)

15:53:34 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:34 executing program 5:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:34 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:34 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:34 executing program 5:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:34 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/86, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000600))

15:53:34 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:34 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:34 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:34 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:34 executing program 5:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:34 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/86, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000600))

15:53:34 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:34 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:34 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:35 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:35 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:35 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/86, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000600))

[  337.177015][   T27] kauditd_printk_skb: 60 callbacks suppressed
[  337.177035][   T27] audit: type=1804 audit(1583855615.176:374): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/24/bus" dev="sda1" ino=16776 res=1
15:53:35 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

[  337.244406][   T27] audit: type=1800 audit(1583855615.176:375): pid=15780 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16776 res=0
15:53:35 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:35 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  337.391487][   T27] audit: type=1804 audit(1583855615.186:376): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/77/bus" dev="sda1" ino=16780 res=1
[  337.454608][   T27] audit: type=1800 audit(1583855615.186:377): pid=15782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16780 res=0
15:53:35 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  337.533823][   T27] audit: type=1804 audit(1583855615.446:378): pid=15791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/88/bus" dev="sda1" ino=16741 res=1
[  337.686205][   T27] audit: type=1800 audit(1583855615.446:379): pid=15791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16741 res=0
15:53:35 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:35 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:35 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:35 executing program 3:
r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0)
ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0)
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000040)={0x1, 0x0, 0x0, &(0x7f0000000200)=""/86, 0x0})
ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000100)={0x0, 0x0, 0x0, &(0x7f0000000380)=""/107, 0x0})
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000080))
ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x5)
ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af04, &(0x7f0000000600))

15:53:35 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  337.750519][   T27] audit: type=1804 audit(1583855615.546:380): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/104/bus" dev="sda1" ino=16772 res=1
[  337.861404][   T27] audit: type=1800 audit(1583855615.546:381): pid=15837 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16772 res=0
[  337.907966][   T27] audit: type=1804 audit(1583855615.586:382): pid=15838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/25/bus" dev="sda1" ino=16776 res=1
[  337.932655][   T27] audit: type=1800 audit(1583855615.586:383): pid=15838 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16776 res=0
15:53:36 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:36 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:36 executing program 3:
r0 = socket$inet(0x2, 0x2000080001, 0x84)
setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000100)={0x1a8}, 0x8)
sendmsg(r0, &(0x7f00000000c0)={&(0x7f0000006000)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000007f80)=[{&(0x7f0000000040)='*', 0x1a000}], 0x1}, 0x0)

15:53:36 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:36 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:36 executing program 3:
mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0)
r0 = gettid()
timer_create(0x0, &(0x7f0000066000)={0x0, 0x12}, &(0x7f00009b1ffc))
timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0)
tkill(r0, 0x1000000000016)

15:53:36 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:36 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:36 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:36 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:36 executing program 3:
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[], 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
creat(&(0x7f0000000140)='./bus\x00', 0x0)
r0 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_buf(r0, 0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(0xffffffffffffffff, 0x40046411, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f0000000000)=0x2)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160555]})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000000780)={"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"})
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, 0x0)

15:53:36 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:36 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:37 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:37 executing program 3:
r0 = socket(0x11, 0x800000003, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, 0x0}, 0x4)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x10000000000f, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x83b895581628fca4, 0x0, &(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000100)}], 0x1)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, r2}, 0x30)
write$snddsp(0xffffffffffffffff, &(0x7f0000000300)="6b6bbc14e9e3b4858af07eb20e2ae1a6d27d5c6aa6fb29afc69bc66c28e09b3e6600625405deb5cc271a4437059238faa5326dd3e0f03d48e03c3561b30fc3352743a9d56b4f56675f47ce592af334cd4a6fe57b24eb815e9a348342f4191186fa1000debff1f8d82dae7c040f1f02735bdce02ba820d51a5a31b89e2af0fefc41dfbdb89587c489a42e770b2423fb06fcea02c198e832ce270597204b62bbb5733397e92adf8c0c0b5e4c67b223df39551ffadf97e2c0705610db7b2c88277a569409dfe2e2d90434", 0xc9)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5)
sendto$inet(r1, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

15:53:37 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:37 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:37 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:37 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:37 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:37 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0)
ioctl$KVM_SET_CPUID(r2, 0x4008ae8a, &(0x7f0000000200)=ANY=[@ANYBLOB="05000000000000000d000028e47b87a9000000ff010000000000004000000000010000000000000084000000fff0ffff04040000000000000a00000006"])
ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="41000000000000009003"])

15:53:37 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:37 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:37 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:37 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:38 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:38 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:38 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(0xffffffffffffffff)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:38 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:38 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:38 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(0xffffffffffffffff, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r4 = gettid()
waitid(0x0, r4, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r1, 0x8, 0x0)
sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r2)

15:53:38 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:38 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:38 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(0xffffffffffffffff)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:38 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:38 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:39 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(0xffffffffffffffff, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r4 = gettid()
waitid(0x0, r4, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r1, 0x8, 0x0)
sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r2)

15:53:39 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:39 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(0xffffffffffffffff)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:39 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:39 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(0xffffffffffffffff, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r4 = gettid()
waitid(0x0, r4, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r1, 0x8, 0x0)
sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r2)

15:53:39 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:39 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:39 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:39 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:39 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:39 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:39 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:40 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:40 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

[  342.232114][   T27] kauditd_printk_skb: 78 callbacks suppressed
[  342.232133][   T27] audit: type=1804 audit(1583855620.236:462): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/36/bus" dev="sda1" ino=16795 res=1
15:53:40 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:40 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  342.408757][   T27] audit: type=1800 audit(1583855620.236:463): pid=17307 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16795 res=0
15:53:40 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:40 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  342.469762][   T27] audit: type=1804 audit(1583855620.446:464): pid=17313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/101/bus" dev="sda1" ino=16735 res=1
[  342.533699][   T27] audit: type=1800 audit(1583855620.446:465): pid=17313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16735 res=0
15:53:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:40 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

[  342.704089][   T27] audit: type=1804 audit(1583855620.706:466): pid=17325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/112/bus" dev="sda1" ino=16790 res=1
15:53:40 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  342.829034][   T27] audit: type=1800 audit(1583855620.706:467): pid=17325 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16790 res=0
15:53:40 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:40 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

[  342.966172][   T27] audit: type=1804 audit(1583855620.746:468): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/88/bus" dev="sda1" ino=16738 res=1
[  342.999627][   T27] audit: type=1800 audit(1583855620.746:469): pid=17329 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16738 res=0
[  343.032188][   T27] audit: type=1804 audit(1583855620.776:470): pid=17331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/37/bus" dev="sda1" ino=16706 res=1
15:53:41 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:41 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

[  343.241937][   T27] audit: type=1800 audit(1583855620.776:471): pid=17331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16706 res=0
15:53:41 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:41 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:41 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:41 executing program 0:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r0=>0x0)
io_submit(r0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:41 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:41 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:41 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r2 = dup(r1)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r2, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:41 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:41 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:42 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:42 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x0, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:42 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:42 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:42 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:42 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x0, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:42 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x0, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:42 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:42 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:42 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:42 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:42 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:43 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:43 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:43 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:43 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:43 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:43 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:43 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:43 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:43 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:43 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:43 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:43 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:43 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:44 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:44 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:44 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r0 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r1 = socket(0x400000000000010, 0x802, 0x0)
write(r1, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:44 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:44 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000140))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r4 = gettid()
waitid(0x0, r4, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r1, 0x8, 0x0)
sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r2)

15:53:44 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:44 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:44 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:44 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:44 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:44 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:44 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000140))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r4 = gettid()
waitid(0x0, r4, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r1, 0x8, 0x0)
sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r2)

15:53:44 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:44 executing program 3:
r0 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:45 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:45 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:45 executing program 1:
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
r0 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r0, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000140))
listen(r0, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
r2 = accept4(r0, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r3, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r4 = gettid()
waitid(0x0, r4, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r1, 0x8, 0x0)
sendto$inet6(r1, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r2)

15:53:45 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  347.310650][   T27] kauditd_printk_skb: 72 callbacks suppressed
[  347.310670][   T27] audit: type=1804 audit(1583855625.306:544): pid=18152 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/100/bus" dev="sda1" ino=16816 res=1
15:53:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

[  347.484434][   T27] audit: type=1800 audit(1583855625.386:545): pid=18152 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16816 res=0
15:53:45 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:45 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:45 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:45 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:45 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

[  347.619326][   T27] audit: type=1804 audit(1583855625.406:546): pid=18153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/112/bus" dev="sda1" ino=16820 res=1
[  347.809728][   T27] audit: type=1800 audit(1583855625.406:547): pid=18153 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16820 res=0
15:53:45 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:45 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:45 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  347.902299][   T27] audit: type=1804 audit(1583855625.766:548): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/48/bus" dev="sda1" ino=16801 res=1
[  347.931993][   T27] audit: type=1800 audit(1583855625.766:549): pid=18173 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16801 res=0
15:53:46 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:46 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  348.070525][   T27] audit: type=1804 audit(1583855625.856:550): pid=18181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/113/bus" dev="sda1" ino=16820 res=1
15:53:46 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  348.202646][   T27] audit: type=1800 audit(1583855625.856:551): pid=18181 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16820 res=0
15:53:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

[  348.302262][   T27] audit: type=1804 audit(1583855625.866:552): pid=18177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/101/bus" dev="sda1" ino=16814 res=1
15:53:46 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  348.409598][   T27] audit: type=1800 audit(1583855625.866:553): pid=18177 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16814 res=0
15:53:46 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:46 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:46 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:46 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, 0xffffffffffffffff)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:46 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:46 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:46 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:46 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:47 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:47 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:47 executing program 2:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:47 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:47 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:47 executing program 4:
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:47 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200)
r1 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r2 = socket(0x400000000000010, 0x802, 0x0)
write(r2, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:47 executing program 2:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:47 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(0xffffffffffffffff, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:47 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:47 executing program 4:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:47 executing program 2:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:47 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:48 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:48 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:48 executing program 4:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:48 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:48 executing program 2:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:48 executing program 4:
r0 = creat(0x0, 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:48 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:48 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:48 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:48 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:48 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:48 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:48 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:48 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x0, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:48 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:49 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, 0x0, 0x0)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, 0x0, 0x0)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:49 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:49 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x0, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, 0x0, 0x0)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:49 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:49 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:49 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:49 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:49 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x0, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:49 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x0, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x0, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:50 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:50 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:50 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180))
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:50 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x0, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

[  352.325272][   T27] kauditd_printk_skb: 50 callbacks suppressed
[  352.325289][   T27] audit: type=1804 audit(1583855630.326:604): pid=18814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/59/bus" dev="sda1" ino=16606 res=1
[  352.419225][   T27] audit: type=1804 audit(1583855630.336:605): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/111/bus" dev="sda1" ino=16823 res=1
15:53:50 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:50 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:50 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x0, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

[  352.614640][   T27] audit: type=1800 audit(1583855630.336:606): pid=18812 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16823 res=0
15:53:50 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  352.783811][   T27] audit: type=1800 audit(1583855630.356:607): pid=18814 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16606 res=0
15:53:50 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x0, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:50 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  352.932104][   T27] audit: type=1804 audit(1583855630.696:608): pid=18934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/112/bus" dev="sda1" ino=16606 res=1
15:53:51 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  353.075310][   T27] audit: type=1800 audit(1583855630.696:609): pid=18934 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16606 res=0
15:53:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x0, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:51 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:51 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:51 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  353.181981][   T27] audit: type=1804 audit(1583855630.816:610): pid=18941 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/123/bus" dev="sda1" ino=16852 res=1
[  353.219700][   T27] audit: type=1800 audit(1583855630.816:611): pid=18941 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16852 res=0
[  353.274779][   T27] audit: type=1804 audit(1583855630.816:612): pid=18943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/60/bus" dev="sda1" ino=16856 res=1
15:53:51 executing program 5:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  353.415386][   T27] audit: type=1800 audit(1583855630.816:613): pid=18943 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16856 res=0
15:53:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:51 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:51 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:51 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:51 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:51 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:52 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:52 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:52 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:52 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:52 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:52 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:52 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:52 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:52 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:52 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:52 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:53 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, 0x0)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:53 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0), 0x0)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:53 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:53 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:53 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, 0x0, 0x0)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200", 0x12)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:53 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:53 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:53 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200", 0x12)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:53 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, 0x0, 0x0)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:53 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:53 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:54 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e0200", 0x12)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:54 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:54 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, 0x0, 0x0)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba10", 0x1b)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:54 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:54 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:54 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:54 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba10", 0x1b)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:54 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:54 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:54 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x0, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:54 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:55 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba10", 0x1b)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:55 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:55 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:55 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x0, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:55 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:55 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba108008000200", 0x20)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:55 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  357.355712][   T27] kauditd_printk_skb: 69 callbacks suppressed
[  357.355732][   T27] audit: type=1804 audit(1583855635.356:683): pid=19760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/69/bus" dev="sda1" ino=16861 res=1
15:53:55 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x0, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:53:55 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba108008000200", 0x20)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

[  357.462807][   T27] audit: type=1800 audit(1583855635.356:684): pid=19760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16861 res=0
15:53:55 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:55 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  357.634877][   T27] audit: type=1804 audit(1583855635.636:685): pid=19772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/70/bus" dev="sda1" ino=16861 res=1
[  357.757190][   T27] audit: type=1800 audit(1583855635.666:686): pid=19772 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16861 res=0
15:53:55 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:55 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:55 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba108008000200", 0x20)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:55 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x0, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  357.926895][   T27] audit: type=1804 audit(1583855635.766:687): pid=19781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/124/bus" dev="sda1" ino=16546 res=1
15:53:56 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:56 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(0xffffffffffffffff)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  358.104593][   T27] audit: type=1800 audit(1583855635.766:688): pid=19781 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16546 res=0
15:53:56 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  358.221619][   T27] audit: type=1804 audit(1583855635.846:689): pid=19784 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/134/bus" dev="sda1" ino=16627 res=1
15:53:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:56 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:56 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  358.421412][   T27] audit: type=1800 audit(1583855635.846:690): pid=19784 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="sda1" ino=16627 res=0
15:53:56 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  358.591424][   T27] audit: type=1804 audit(1583855636.006:691): pid=19791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/134/bus" dev="sda1" ino=16753 res=1
[  358.619026][   T27] audit: type=1800 audit(1583855636.006:692): pid=19791 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16753 res=0
15:53:56 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(0xffffffffffffffff)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f19", 0x22)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:56 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:56 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:56 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:56 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:57 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(0xffffffffffffffff)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:57 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:57 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:57 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:57 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:57 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196b", 0x23)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:57 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(0x0, 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:57 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:57 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:57 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:57 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(0x0, 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:57 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:57 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:57 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:58 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(0x0, 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:58 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x0)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x9, &(0x7f0000000080)=0x7, 0x4)

15:53:58 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x0, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:58 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:58 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:58 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080)=0x7, 0x4)

15:53:58 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:58 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x0, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:58 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080)=0x7, 0x4)

15:53:58 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
dup(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:59 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:59 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:53:59 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:53:59 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x0, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000080)=0x7, 0x4)

15:53:59 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:59 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
dup(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0)

15:53:59 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:53:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0)

15:53:59 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:53:59 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
dup(r2)
r3 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(0xffffffffffffffff, r3, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:53:59 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, 0x0, 0x0)

15:54:00 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080), 0x4)

15:54:00 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:00 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:00 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:00 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:54:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080), 0x4)

[  362.404217][   T27] kauditd_printk_skb: 60 callbacks suppressed
[  362.404236][   T27] audit: type=1804 audit(1583855640.396:753): pid=20487 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/145/bus" dev="sda1" ino=16785 res=1
[  362.478476][   T27] audit: type=1804 audit(1583855640.416:754): pid=20496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/134/bus" dev="sda1" ino=16769 res=1
15:54:00 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

[  362.559082][   T27] audit: type=1800 audit(1583855640.416:755): pid=20496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16769 res=0
15:54:00 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0x0)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:00 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:00 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
socket(0x400000000000010, 0x802, 0x0)
write(0xffffffffffffffff, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x9, &(0x7f0000000080), 0x4)

[  362.737874][   T27] audit: type=1804 audit(1583855640.446:756): pid=20493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/83/bus" dev="sda1" ino=16893 res=1
[  362.864415][   T27] audit: type=1800 audit(1583855640.446:757): pid=20493 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16893 res=0
[  362.892925][   T27] audit: type=1804 audit(1583855640.456:758): pid=20491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/139/bus" dev="sda1" ino=16894 res=1
15:54:00 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  363.008971][   T27] audit: type=1800 audit(1583855640.456:759): pid=20491 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16894 res=0
[  363.063570][   T27] audit: type=1804 audit(1583855640.776:760): pid=20606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/135/bus" dev="sda1" ino=16606 res=1
[  363.158932][   T27] audit: type=1800 audit(1583855640.776:761): pid=20606 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16606 res=0
[  363.180287][   T27] audit: type=1804 audit(1583855640.806:762): pid=20610 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/84/bus" dev="sda1" ino=16785 res=1
15:54:01 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(0xffffffffffffffff, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:01 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:01 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
r2 = socket$inet_udp(0x2, 0x2, 0x0)
connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10)
r3 = socket(0x400000000000010, 0x802, 0x0)
write(r3, &(0x7f00000000c0)="24000000200099f0003be90000ed190e020008160000100000ba1080080002007f196be0", 0x24)
setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080), 0x4)

15:54:01 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:01 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r4 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r4, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:54:01 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:01 executing program 3:
ioctl$KVM_SET_XSAVE(0xffffffffffffffff, 0x5000aea5, &(0x7f00000033c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x909, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1173, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x47, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f09, 0x530, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd27, 0xe6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd0ba, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0xb1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdc76, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000]})
clone(0x26100900, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x0, 0xaaaacf9, &(0x7f0000002340)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000004000000040000080000000101308006d5e43296477c2079f73", 0x3a, 0x3fc}, {&(0x7f00000001c0)="7649fa8b60ea69449c40e6f532f2f76a940ce1e4a2cd7ae487e9b9fdaf858ff42499b1836e3ae7e885504ea2ec15b80119cc33d400d6f17b67a3aaa6255e57acc687bd9518ec5e83737238232e7f8c417aa344a31b0190f96371a18d80b0bf368906a96fa98fc3340c61906fc9e8525f8355247df926b7215c9dd2d8a9ecb8e8ea50cca36623263a2606ba03cd74924fac7b6a2b", 0x94, 0x9}, {&(0x7f00000023c0)="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", 0x1000}, {&(0x7f0000001280)="aa948f56e61adb364206e4f5f2ff790e931b6e1a765dad8c18867fa58d13eb440889e7382158721e0c411bba48d0077ec0e1fc34689c612d1c7581f3d2ffe896372a89f3fece301254047fa1f0c020f3b315b88eebe4f0226b221bfdc8861c842f58279d23c2f06111e53a16c4cacd37b8c3ff8101dabdbf71b3a3134c9e3f3dfce9b1aeb5d2adadd76d82371f53b1007dd5f629c12c1ba9da4f97c3b9d114f4701ff87cc1ba87df92289317e5d39554908a1d2ecc5e844d60326392bc", 0xbd, 0x5}, {&(0x7f0000001340)="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", 0x1000, 0x2}], 0x4801, 0x0)

15:54:01 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x0)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:01 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:01 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:01 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:01 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:02 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, 0x0, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:02 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:02 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x0)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:02 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:02 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:02 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:02 executing program 3:
r0 = socket$inet6(0xa, 0x3, 0x1)
connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x1}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x3c}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8)
sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfec0)

15:54:02 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, 0x0, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:02 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x0)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:02 executing program 3:
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, 0xe)

15:54:02 executing program 2:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:02 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, 0x0, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:03 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, 0x0, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:03 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:03 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:03 executing program 3:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/ptmx\x00', 0x2, 0x0)
accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0xd)
write(r0, &(0x7f0000000040)="e0", 0xfffffe00)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0))

15:54:03 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, 0x0, 0x0)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:03 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:03 executing program 3:

15:54:03 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:03 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:03 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:03 executing program 3:

15:54:03 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:04 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, 0x0, 0x0)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:04 executing program 3:

15:54:04 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:04 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:04 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:04 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:04 executing program 3:

15:54:04 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:04 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:04 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:04 executing program 3:

15:54:04 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:05 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:05 executing program 3:

15:54:05 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x0)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:05 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(0xffffffffffffffff)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:05 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:05 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:05 executing program 3:

15:54:05 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(0xffffffffffffffff)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:05 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:05 executing program 3:

15:54:05 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x0)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  367.544259][   T27] kauditd_printk_skb: 71 callbacks suppressed
[  367.544279][   T27] audit: type=1804 audit(1583855645.546:834): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/146/bus" dev="sda1" ino=16928 res=1
15:54:05 executing program 3:

[  367.697964][   T27] audit: type=1800 audit(1583855645.586:835): pid=21896 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16928 res=0
[  367.826853][   T27] audit: type=1804 audit(1583855645.606:836): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/99/bus" dev="sda1" ino=16657 res=1
[  367.879447][   T27] audit: type=1800 audit(1583855645.606:837): pid=21897 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16657 res=0
[  367.900480][   T27] audit: type=1804 audit(1583855645.776:838): pid=21903 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/156/bus" dev="sda1" ino=16933 res=1
15:54:06 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:06 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:06 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(0xffffffffffffffff)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:06 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:06 executing program 3:

15:54:06 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x0)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  368.140387][   T27] audit: type=1804 audit(1583855646.136:839): pid=21918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/100/bus" dev="sda1" ino=16940 res=1
[  368.239915][   T27] audit: type=1800 audit(1583855646.136:840): pid=21918 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16940 res=0
15:54:06 executing program 3:

15:54:06 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  368.318530][   T27] audit: type=1804 audit(1583855646.136:841): pid=21917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/146/bus" dev="sda1" ino=16941 res=1
[  368.375626][   T27] audit: type=1800 audit(1583855646.136:842): pid=21917 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16941 res=0
15:54:06 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(0x0, 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  368.408449][   T27] audit: type=1804 audit(1583855646.246:843): pid=21922 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/147/bus" dev="sda1" ino=16952 res=1
15:54:06 executing program 3:

15:54:06 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(0x0, 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:06 executing program 3:

15:54:07 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x0, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:07 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:07 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:07 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(0x0, 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:07 executing program 3:

15:54:07 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(0x0, 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:07 executing program 3:

15:54:07 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(0x0, 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:07 executing program 3:

15:54:07 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:07 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(0x0, 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:07 executing program 3:

15:54:08 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:08 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:08 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:08 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:08 executing program 3:

15:54:08 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:08 executing program 3:

15:54:08 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:08 executing program 3:

15:54:08 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:08 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:08 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:08 executing program 3:

15:54:08 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x0, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:08 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:08 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:08 executing program 3:

15:54:09 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:09 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:09 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:09 executing program 3:

15:54:09 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:09 executing program 3:

15:54:09 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x0, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:09 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:09 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:09 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
dup(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:09 executing program 3:

15:54:09 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:09 executing program 3:

15:54:09 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x0, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:10 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(0x0, 0x0, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x0)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:10 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
dup(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:10 executing program 3:

15:54:10 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:10 executing program 3:

15:54:10 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x0, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:10 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:10 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
dup(r4)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r5, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:10 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
syz_open_dev$audion(0x0, 0x0, 0x541000)
r5 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r5})

15:54:10 executing program 3:

[  372.622561][   T27] kauditd_printk_skb: 41 callbacks suppressed
[  372.622580][   T27] audit: type=1804 audit(1583855650.626:885): pid=22616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/109/bus" dev="sda1" ino=16978 res=1
15:54:10 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  372.763359][   T27] audit: type=1800 audit(1583855650.626:886): pid=22616 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16978 res=0
15:54:10 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:10 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:10 executing program 3:

[  372.891487][   T27] audit: type=1804 audit(1583855650.656:887): pid=22612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/156/bus" dev="sda1" ino=16995 res=1
[  373.037748][   T27] audit: type=1800 audit(1583855650.656:888): pid=22612 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=16995 res=0
[  373.062168][   T27] audit: type=1804 audit(1583855650.726:889): pid=22619 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir801395510/syzkaller.YtwalR/167/bus" dev="sda1" ino=16970 res=1
15:54:11 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:11 executing program 3:

15:54:11 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
syz_open_dev$audion(0x0, 0x0, 0x541000)
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)

[  373.087312][   T27] audit: type=1804 audit(1583855650.816:890): pid=22622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/151/bus" dev="sda1" ino=16980 res=1
[  373.133427][   T27] audit: type=1800 audit(1583855650.816:891): pid=22622 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16980 res=0
[  373.154368][   T27] audit: type=1804 audit(1583855651.126:892): pid=22736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir248856500/syzkaller.4iQF8k/157/bus" dev="sda1" ino=17009 res=1
15:54:11 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

[  373.297029][   T27] audit: type=1800 audit(1583855651.126:893): pid=22736 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="bus" dev="sda1" ino=17009 res=0
[  373.400280][   T27] audit: type=1804 audit(1583855651.186:894): pid=22739 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/110/bus" dev="sda1" ino=17010 res=1
15:54:11 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:11 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:11 executing program 3:

15:54:11 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:11 executing program 0:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(0xffffffffffffffff, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r1=>0x0)
io_submit(r1, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r3 = dup(r2)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r3, r4, 0x0, 0x8000fffffffe)
syz_open_dev$audion(0x0, 0x0, 0x541000)
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0)

15:54:11 executing program 3:

15:54:11 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:11 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0x0)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:11 executing program 3:

15:54:12 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:12 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x0)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:12 executing program 3:

15:54:12 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x0, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:12 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:12 executing program 0:

15:54:12 executing program 3:
syz_mount_image$vfat(&(0x7f0000000080)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0xfffffffffffff57a, 0x1, &(0x7f0000000380)=[{&(0x7f00000000c0)="ebe7f68fdb66732e66613400020401ff66000270fff8", 0x16}], 0x0, 0x0)
r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0)
fchdir(r0)
r1 = socket$inet_udplite(0x2, 0x2, 0x88)
r2 = dup(r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(r3, &(0x7f0000000240)=ANY=[], 0xfe76)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x17e, 0x0)
write$binfmt_aout(r4, &(0x7f0000000400)=ANY=[@ANYPTR64], 0x8)
sendfile(r4, r4, &(0x7f00000001c0), 0x8080fffffffe)

15:54:12 executing program 0:
getpgrp(0x0)
r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ppp\x00', 0x101002, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
fanotify_init(0x0, 0x0)
userfaultfd(0x0)
unshare(0x24020400)
pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200), 0x0)
ioctl$EVIOCGPROP(r0, 0xc004743e, &(0x7f00000002c0)=""/246)
timer_create(0x6, &(0x7f00000003c0)={0x0, 0x1, 0x4, @thr={&(0x7f00000004c0)="aa9f3545be8913833db5f7afe20d797898c7ebc10781c39636d490acd9d63b864b11c41f406aa3a71dbd3695981c64c53abf82f62b8952f4f7d50cd44aaa5e1900a53629d64f76d6eda37d75f5754bf612c17dc49552da01b36711d60955732311afd206d0e5630753104a41743184b5b2780b81be3fbcfda1de8948da680e3effd667c94f74b4b21f94451907e2f9ae29779398101d0467660e7c2309565592048ff24b7741186dcfc748fd3e3ea16b016f27a5332447f03466e2a641ceda3b342a59644317e1e0a73814ae6267afbc4420e126635826a16d2989d9c9c73b5c", &(0x7f00000005c0)="d7d973b5b056c705c1e24c4aecde43f087c6f4aec5c53d9d4332459d6456d85ea2760b5dcf8a8cc6b9e06d89bb6e17200b6847b401c24155a230acdcfd7176a8816c70522571474cd8be30fca123e188ba05"}}, &(0x7f00000006c0))
clock_gettime(0x0, &(0x7f0000000700))
r1 = memfd_create(&(0x7f0000000280)='^\x00', 0x0)
close(0xffffffffffffffff)
ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, 0x0)
accept4$netrom(0xffffffffffffffff, &(0x7f0000000180)={{0x3, @default}, [@rose, @bcast, @netrom, @default, @bcast, @rose, @null, @netrom]}, &(0x7f0000000000)=0x48, 0x80000)
pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003)
ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0)
sendfile(r0, r1, 0x0, 0x102002700)

15:54:12 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x0)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:12 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:12 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:12 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x0)
getegid()
syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)

15:54:12 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:13 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x0, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:13 executing program 3:

15:54:13 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x0, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:13 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:13 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:13 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(0x0, 0x8, 0x80100)

15:54:13 executing program 0:

15:54:13 executing program 3:

15:54:13 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:13 executing program 3:

15:54:13 executing program 0:
getpid()
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e)
syz_open_procfs(0x0, 0x0)
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r0, 0x400455c8, 0x2)

15:54:13 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:13 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, 0x0, 0x0)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:13 executing program 3:
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = dup(r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r2 = memfd_create(&(0x7f00000002c0)='systemem0md5sum$\x00', 0x0)
r3 = socket$inet6_tcp(0xa, 0x1, 0x0)
r4 = fcntl$dupfd(r3, 0x0, r3)
setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000000)={0x0, @remote, 0x0, 0x0, 'wlc\x00'}, 0x2c)
mmap(&(0x7f0000000000/0xaa2000)=nil, 0xaa2000, 0x5, 0x11, r2, 0x0)
rt_sigaction(0x7, &(0x7f0000b4a000)={0x0, 0x0, 0x0}, 0x0, 0x8, &(0x7f0000000000))
prctl$PR_SET_DUMPABLE(0x4, 0x0)
syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_tables_targets\x00')

15:54:13 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(0x0, 0x0, 0x80100)

15:54:13 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  376.088583][T23081] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0
15:54:14 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:14 executing program 3:
r0 = getpid()
sched_setscheduler(r0, 0x5, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x40046f41, 0x76006e)
syz_open_procfs(0x0, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socket$inet(0x2, 0x4000000000000001, 0x0)
r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0xf)
ioctl$KDADDIO(r1, 0x400455c8, 0x2)
close(r1)
sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x8cda, 0x0, 0x0)

15:54:14 executing program 0:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0)
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:54:14 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, 0x0, 0x0)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:14 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, 0x0)
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:14 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(0x0, 0x0, 0x80100)

15:54:14 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, 0x0, 0x0)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:14 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:14 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:14 executing program 3:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640))
r4 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x6, 0x48a080)
getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0x0, 0xc8, 0x5, 0x1, 0x100000001, 0x2, 0x3, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x6, 0x67]}, 0x0)
getsockopt$inet_sctp_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000180)=0x10)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

15:54:14 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(0x0, 0x0, 0x80100)

15:54:15 executing program 0:
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ttyS3\x00', 0x0, 0x0)
ioctl$TCSBRKP(r0, 0x5437, 0x0)
open(&(0x7f00000001c0)='./file0\x00', 0x0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000))
dup(0xffffffffffffffff)
fstatfs(0xffffffffffffffff, &(0x7f0000000400)=""/128)
r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000000040))
dup2(r1, 0xffffffffffffffff)
socket$nl_route(0x10, 0x3, 0x0)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0)

15:54:15 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:15 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:15 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:15 executing program 5:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, 0x0, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, 0x0)
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
getegid()
syz_open_dev$rtc(0x0, 0x0, 0x0)

15:54:15 executing program 0:
r0 = socket$nl_xfrm(0x10, 0x3, 0x6)
sendmsg$nl_xfrm(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@migrate={0x108, 0x21, 0x1, 0x0, 0x0, {{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}, [@migrate={0x9c, 0x11, [{@in=@remote, @in=@multicast1, @in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa}, {@in=@multicast1, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in6=@dev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}]}, @encap={0x1c, 0x4, {0x0, 0x0, 0x0, @in=@local}}]}, 0x108}}, 0x0)

15:54:15 executing program 3:
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x17, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48)

15:54:15 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  377.523576][T23354] 
15:54:15 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0))
io_submit(0x0, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  377.546486][T23354] **********************************************************
15:54:15 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:15 executing program 0:
perf_event_open(&(0x7f0000000000)={0x1000000002, 0x70, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
dup(0xffffffffffffffff)
clone(0x3a3dd4008400af01, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
memfd_create(&(0x7f0000000100)='\vem1\xc1\xf8\xa6\x8dN\xc0\xa3w\xe2\xcb\xa2\xba\xe5\xf4\x97\xac#*\xff', 0x0)
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = fcntl$dupfd(r0, 0x0, r0)
setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x0, @remote, 0x0, 0x0, 'wlc\x00'}, 0x2c)

[  377.593487][T23354] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
[  377.624721][T23354] **                                                      **
[  377.694633][T23354] ** trace_printk() being used. Allocating extra memory.  **
[  377.722578][T23354] **                                                      **
[  377.735640][T23354] ** This means that this is a DEBUG kernel and it is     **
[  377.739762][   T27] kauditd_printk_skb: 59 callbacks suppressed
[  377.739791][   T27] audit: type=1804 audit(1583855655.736:954): pid=23358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/120/bus" dev="sda1" ino=17007 res=1
[  377.748752][T23354] ** unsafe for production use.                           **
[  377.752503][   T27] audit: type=1800 audit(1583855655.746:955): pid=23358 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17007 res=0
[  377.802565][T23354] **                                                      **
[  377.820859][T23366] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0
[  377.832785][T23354] ** If you see this message and you are not debugging    **
15:54:15 executing program 0:
r0 = getpgrp(0x0)
setpriority(0x0, r0, 0xffff)
perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0)
r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0)
getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000740)={0x3, 0x2, 0xf000, 0x1000, &(0x7f0000000000/0x1000)=nil})
r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x8000000000, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfb]})
socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000))
prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000004c0)={&(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000002000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, 0x0}, 0x68)
getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x12)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_RUN(r3, 0xae80, 0x0)
ioctl$KVM_NMI(r3, 0xae9a)
ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000640))
syz_open_dev$vcsa(0x0, 0x6, 0x48a080)
ioctl$KVM_RUN(r3, 0xae80, 0x0)

[  377.844126][T23354] ** the kernel, report this immediately to your vendor!  **
[  377.852756][T23354] **                                                      **
[  377.874822][T23354] **   NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE NOTICE   **
15:54:15 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:15 executing program 5:
perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3, 0x8}}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
open(&(0x7f00000001c0)='./bus\x00', 0x141042, 0x0)
write$P9_RREADLINK(0xffffffffffffffff, &(0x7f0000000380)=ANY=[@ANYBLOB="a5bf5d930796f759bcc7c2fb0d08d2ba519b392fbfa930168e8fc0cf5bb9fbf1db814abe3d03c0fec5242edbff80b65698d3e7f515de1dc0149a1d0ecaa24b1c2aa8e60b09dafb7eb616ca47c2a057697a08bff2b80c0e7c73d1080cabee56193b06c716212e81e99d00e8909cad6a4960ff21e275e8d2e17074932957cd44784d730e8653d20a54c2434551b8221f66f0c0687aea62253669996edac45f9c8770ac1e45f20cf23d75b75fa91d1ec8de0c5c96c85d378fcd9f9296e2aa254f22cbe96b3b83144ad22aba3f517a6024160c5adea1d26b55e059770c9ca130170000000000"], 0x1a)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = creat(&(0x7f0000000140)='./bus\x00', 0x0)
r1 = socket$unix(0x1, 0x5, 0x0)
getsockopt$sock_buf(r1, 0x1, 0x0, 0x0, 0x0)
ioctl$DRM_IOCTL_AUTH_MAGIC(r0, 0x40046411, &(0x7f0000000080))
openat$zero(0xffffffffffffff9c, 0x0, 0x18b001, 0x0)
recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, 0x0)
perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60)
r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0)
ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil})
read$usbmon(0xffffffffffffffff, 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_ADDFB(0xffffffffffffffff, 0xc01c64ae, &(0x7f0000000100)={0xfffffffd, 0x3f, 0x0, 0x2, 0x3, 0x1ff})
ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f00000002c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62160555]})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$KVM_SET_LAPIC(r4, 0x4400ae8f, &(0x7f0000000780)={"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"})
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$DRM_IOCTL_MODE_CURSOR(0xffffffffffffffff, 0xc01c64a3, &(0x7f0000000180)={0x0, 0x26, 0x1000, 0x101, 0x3, 0x7, 0xfffffff8})
ioctl$KVM_RUN(r4, 0xae80, 0x0)
ioctl$VHOST_GET_VRING_ENDIAN(0xffffffffffffffff, 0x4008af14, 0x0)
ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, 0x0)

[  377.951644][T23354] **********************************************************
15:54:16 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:16 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:16 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0)
fallocate(r1, 0x0, 0x40000, 0x4)
fallocate(r0, 0x0, 0x0, 0x10fffe)
ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0xd000000, r1, 0x0, 0x8})
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0)
open(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0)

[  378.130686][   T27] audit: type=1804 audit(1583855656.126:956): pid=23483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/121/bus" dev="sda1" ino=17010 res=1
[  378.268138][   T27] audit: type=1800 audit(1583855656.206:957): pid=23483 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17010 res=0
15:54:16 executing program 5:
sched_setattr(0x0, 0x0, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x2, 0x0)
read$midi(r0, &(0x7f00000001c0)=""/20, 0x14)

15:54:16 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(0xffffffffffffffff)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  378.375650][   T27] audit: type=1804 audit(1583855656.376:958): pid=23594 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir545929317/syzkaller.XDyZUH/244/file0" dev="sda1" ino=17033 res=1
15:54:16 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
removexattr(&(0x7f0000000200)='./file0\x00', 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000004f80)=[{{&(0x7f0000000380)=@in6, 0x80, 0x0}, 0x40}, {{0x0, 0x0, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000f00)=""/202, 0xca}], 0x2, &(0x7f00000012c0)=""/234, 0xea}, 0x5}, {{&(0x7f00000013c0)=@nl=@proc, 0x80, &(0x7f0000001680), 0x0, &(0x7f00000016c0)=""/193, 0xc1}, 0x800}], 0x3, 0x10000, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0292642d09fe682728076caff13f893e555dfb717020087990cb1f1f74d043ae817e89eb86b16a0f93848e55182c14dd2354a8b6ee0f0739d7cfbbd049de26889a7a7876562388c8dac424c619e95733925f789fe371733faa7763df5ed0a35c87e379c2a356f158d22366d77e992bb9bcb18a6194e4a616ca24546bf0ebec0dc52e6ac2a97dc8ed483744edb5080000000000000046b735670b813b88d155", @ANYRESHEX, @ANYRESHEX=r5, @ANYBLOB="08000200507b2fa562f9a7c72405de942a24edd3afff201ed6266813e2bcf5a2b9421b1d72ece43b816d1bb81cccd59b94009c1b4556baa8393c40ff2d3c753350", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="080001", @ANYRES32], 0xa, 0x2)
sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000540)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000e06010200000000000000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write(r3, &(0x7f0000000340), 0x41395527)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$FUSE_INTERRUPT(r3, &(0x7f0000000140)={0x10}, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0)
sched_setattr(0x0, 0x0, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000100)={0xad2})
writev(r7, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

[  378.578622][   T27] audit: type=1804 audit(1583855656.576:959): pid=23638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/122/bus" dev="sda1" ino=17027 res=1
15:54:16 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  378.624370][   T27] audit: type=1800 audit(1583855656.576:960): pid=23638 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17027 res=0
15:54:16 executing program 5:
sched_setattr(0x0, 0x0, 0x0)
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
socket(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x100000001)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0)
dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0)
socket(0x0, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
execveat(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)

15:54:16 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(0xffffffffffffffff)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:16 executing program 3:
r0 = socket$packet(0x11, 0x2, 0x300)
r1 = socket$packet(0x11, 0x2, 0x300)
r2 = fcntl$dupfd(r1, 0x0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r3, 0x40045431, &(0x7f0000000080))
r4 = syz_open_pts(r3, 0x0)
ioctl$TCSETSF(r4, 0x5412, &(0x7f0000000100)={0x16})

15:54:16 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:16 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=@ethtool_ringparam={0x10}})

15:54:17 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  379.009001][   T27] audit: type=1804 audit(1583855657.006:961): pid=23725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/123/bus" dev="sda1" ino=17027 res=1
15:54:17 executing program 5:
mkdir(&(0x7f0000000240)='./file1\x00', 0x0)
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000140)='./file0\x00', 0x0)
mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000080)='overlay\x00', 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='lowerdir=./bus,workdir=./file1,upperdir=./file0'])
chdir(&(0x7f00000002c0)='./bus\x00')
mkdir(&(0x7f0000000180)='./bus\x00', 0x0)
mkdir(&(0x7f0000000040)='./bus/file0\x00', 0x0)
rmdir(&(0x7f00000001c0)='./bus\x00')

[  379.131159][   T27] audit: type=1800 audit(1583855657.006:962): pid=23725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17027 res=0
15:54:17 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(0xffffffffffffffff)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  379.168377][   T27] audit: type=1804 audit(1583855657.086:963): pid=23738 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/163/bus" dev="sda1" ino=17035 res=1
15:54:17 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
creat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
io_setup(0x8, &(0x7f0000000280)=<r0=>0x0)
io_submit(r0, 0x0, &(0x7f00000005c0))
r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4080, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0))
socket$inet_udplite(0x2, 0x2, 0x88)
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000001300)={&(0x7f0000000900), 0xc, 0x0, 0x1, 0x0, 0x0, 0x44050}, 0x810)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, 0x0}, 0x40)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20100000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

15:54:17 executing program 3:
r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0)
mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0x10012, r0, 0x0)
fsync(r0)

15:54:17 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:17 executing program 3:
socket(0x11, 0x0, 0x0)
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0)
sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5)
sendto$inet(r0, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

15:54:17 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:17 executing program 5:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
r3 = syz_open_procfs(0x0, &(0x7f0000000000)='auxv\x00')
read$FUSE(r3, 0x0, 0x0)
getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f00000004c0)={{{@in6=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, <r4=>0x0}}, {{@in6=@loopback}, 0x0, @in6=@dev}}, &(0x7f00000005c0)=0xe8)
setsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f0000000600)={@empty, @multicast2, r4}, 0xc)
msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0)
msgrcv(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007006e8dcbfcad68bbac1970e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005b0a8e8c9f952cbeddcd560d5b067fb669c2260379c9e08"], 0x9b, 0xd6d0c418f59fe7d3, 0x0)

15:54:17 executing program 3:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c96fadfe67d576a000000e4ff00", 0x0, 0x404, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

15:54:17 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:17 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(0x0, 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:17 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000440)={0x38, 0x2, 0x1, 0x0, 0x3, 0x0, 0x800000000000}, 0x0)
accept(0xffffffffffffffff, &(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x0)
mkdir(&(0x7f0000000740)='./file0\x00', 0x1a7)
openat$tun(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/net/tun\x00', 0x573102, 0x0)
io_submit(0x0, 0x1, &(0x7f0000000040)=[0x0])
r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x114482, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x6, 0x4, @perf_bp={&(0x7f0000000480), 0x5}, 0x0, 0x100000}, 0x0, 0x0, 0xffffffffffffffff, 0xa)
r5 = socket$inet(0x2, 0x803, 0xa0)
connect$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10)
connect(r5, &(0x7f0000000340)=@ethernet={0x306, @local}, 0x80)
mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x4010, r5, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000200))
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0)
sched_setattr(0x0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x5}, 0x0)
r6 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000600)='cgroup.stat\x00', 0x0, 0x0)
perf_event_open(&(0x7f0000000040)={0x3, 0x70, 0x6b, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0, 0xc}, 0x1000, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, r6, 0x0)
pipe(&(0x7f0000000680)={0xffffffffffffffff, <r7=>0xffffffffffffffff})
socket$inet_icmp_raw(0x2, 0x3, 0x1)
r8 = socket(0x200000000000011, 0x2, 0x0)
r9 = openat$zero(0xffffffffffffff9c, &(0x7f0000000640)='/dev/zero\x00', 0x100, 0x0)
bind$packet(r9, &(0x7f0000000040)={0x11, 0x800000000000004, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14)
ioctl$sock_inet_SIOCADDRT(r8, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0x0, @dev={0xac, 0x2, 0x14, 0x3b}}, {0x2, 0x0, @dev}, {0x2, 0x0, @broadcast}, 0x44, 0x0, 0x2, 0x46a})
r10 = socket$inet6(0xa, 0x3, 0x100000001)
connect$inet6(r10, &(0x7f0000000200)={0xa, 0x0, 0x2, @ipv4={[], [], @multicast1}, 0x5}, 0x1c)
sendmmsg(r10, &(0x7f0000007e00), 0x400000000000058, 0x0)
dup3(r3, r10, 0xc0000)
r11 = socket(0x200000000000011, 0x800, 0x0)
bind$packet(r11, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(r11, 0x890b, &(0x7f0000000080)={0x750, {0x2, 0xfffd, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xb}}, {0x2, 0x4e23, @local}, 0x44, 0x0, 0x2, 0x46a, 0x3, 0x0, 0xffffffffffffffff, 0x0, 0x3})
r12 = socket$inet_udp(0x2, 0x2, 0x0)
ioctl$sock_inet_SIOCADDRT(r12, 0x890b, &(0x7f0000000180)={0x0, {0x2, 0x4e22, @empty}, {0x2, 0x4e20, @remote}, {0x2, 0x4e24, @empty}, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfd, 0x0, 0x40})
setsockopt$IP_VS_SO_SET_ZERO(r12, 0x0, 0x48f, &(0x7f0000001240)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4620, 0x1, 'none\x00', 0x17, 0x1f, 0x53}, 0x2c)
r13 = socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(r13, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10)
setsockopt$sock_int(r13, 0x1, 0x6, &(0x7f0000000080)=0x4, 0x4)
connect$inet(r13, &(0x7f00000004c0)={0x2, 0x0, @broadcast}, 0x10)
setsockopt$inet_mreqn(r13, 0x0, 0x10, 0x0, 0x0)
r14 = socket$inet_udp(0x2, 0x2, 0x0)
r15 = creat(&(0x7f0000000700)='./bus\x00', 0x0)
r16 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0)
sendfile(r15, r16, 0x0, 0x8000fffffffe)
setsockopt$inet_mreqn(r14, 0x0, 0x10, 0x0, 0x0)
fcntl$dupfd(r14, 0x406, 0xffffffffffffffff)
r17 = socket$inet_udp(0x2, 0x2, 0x0)
r18 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
bind$inet(r18, &(0x7f00000002c0)={0x2, 0x0, @remote}, 0x10)
setsockopt$sock_int(r17, 0x1, 0x6, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r19 = creat(&(0x7f00000000c0)='./bus\x00', 0x0)
fallocate(r19, 0x0, 0x0, 0x10001)
openat(0xffffffffffffffff, &(0x7f0000000100)='./file1\x00', 0x204500, 0x56)
getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, 0x0, 0x0)
r20 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
r21 = dup(r20)
execveat(r21, &(0x7f00000000c0)='\x00', &(0x7f00000002c0), 0x0, 0x1000)
r22 = memfd_create(&(0x7f0000000000)='\x00', 0x0)
r23 = dup(r22)
getsockopt$inet_IP_IPSEC_POLICY(r23, 0x0, 0x10, &(0x7f0000001280)={{{@in6, @in6=@loopback}}, {{@in=@empty}, 0x0, @in=@local}}, 0x0)
stat(&(0x7f00000008c0)='.\x00', &(0x7f0000000900))
setresgid(0x0, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x100000003, 0xfb7d, 0x28120001)
creat(&(0x7f0000000000)='./file0\x00', 0x100)

15:54:18 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:18 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="b70200008cfe0000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00a0c5008500000026000000b7000000002000209500000000000000a5c45a695ecbcaf2b8e198452498a0055d5bc0842e6c1a3f1bd8c37784ae4eb2afeb6fc82b41100a1304921fc6070200252b47ce97d5aa6e18eecafbb6b6b59a20c125af2a2169719e93e4d9960a71b3e52506794a3afef7d738e7928f2e4ef01890c04b3364d07e0d8f4e71cf53c91be6b9f8345f1755a1125895b1399807cfee2b6395db8f35a0dc420c732c71f0f56e1bacb6e91ec59d6ba000b4845b1658cefc59b2abdab83859546b52423b155687afc22bfd7c3f91e279de7119830720faf9298d1da8ac72786f703512a9683e53119caf5c11302fdf8c9ec9ce1427c7688c8eabcfe7b642f43f1d5a0873b7d8ce7180451e21940000006c1b0b3a63e1a7c3b9e02305d85f95b287ff39d343dc59348e993ce667570f0000000000b94d18bcdd1f83148372b1f8155e632cca10c6faeb25a28000000000000000d503b06c5408ef9348d1cc87f04543a1714f734692a123397b6bc8d1093bcdf614d90a0117da2b33444ab10b45e3e30e812bdea1e66ab057484021988ce12e0d21d4fbbe4a531d9efb2ca3d5ba143ae362eeb90fff000000e6cb14c3770e9cabff01f764cce30bd5b07f86af3fa98c8f219adfeaf6d4f291a978ad363a9b6ed45df445f87d5bc8dd945d3cd43283a0e99e7f536bdea463ade6d75e34b402ea1cbfbedbc79113139aee9f2405b4aba705b3620600642f0f1161f86e89dfc3c0ea4033903d3f9ec721f275f99d17a545e3488f0989034475c728ca8fcd1d7a78d76f15f4db85eeac19b2315edad5ce9b3ba96441e19ef6b3feac4cc2bfc6ef87b00dcb3b4f233c1f35140aea219c9d378b3346e5e22c81db2db8d7b7bd65dfa2a516f7d47801fc63844fab60c1baad8b0f9ee50663447704cf6a49627aff2496ccbd00ddf5eba89260254c41826dae5aa722ed81f25e485323566343143d7e6e0fed56120229956cb9093db4483769cd5a87fec05c469f2972ba47c55d6602a17592950dc04174cf39c26fa55881ba053d5637acaa87c161d4174ec2d34d076720b484c64c97b13a77413ac9cc368fab17151bf4d5a5ead4a308c619ff1597209fc6927adee87e52944679f8a7934c3b43574c4e0a73f06d3aeb2e3c37d1efa1753bbe362461e69bad9a20496efa15013249ad9499fe1b0d8ae713be35ea6f04e59fbfae4b25a842e1872f0fd079bea6674905f92bfd44d6e3da65b6de39a4df1ae4ff06ec8a58a4c197f86437804691510aa37314879c16efbbb673756acf30213540843bc726ea12484c1dbc62855867aaa3fcc7f91beba2203efa81789e504014ef42e50273cbfb73de599f973f0e677ffa061567c0f69dc773bb5fe5a2daf85257c624f94ecfef0a5b7b1ee6224a33fc5dca18210ff6380b6a217ce232760ddaf6d36c1014a3001ce780e721275bf9218746fea4bb7fc42096af92bdd68e59f334a73e941964c6d79400b32215a087350c37c12bcffd4c2d9192efd18141078b432034a8b49b271d589b1b53f8831140fe5f026afd309a228df911e5aef58afac049665a5e375653837ee4cdcd79061fd37578dfeba3dc72454677675972cd26b1cc600e4af5eacff41de1ffb27d6c1905d8b9dd0e112f6637972bad1281a302726b048295ba2bc1e2b5df2b98f761562d82bfbcbd05ef9f3b2c0c67b99fe5572f707868bc2dfdf48d3a0947827a9484dc32d5945d9427eedc112def54334e26ed6d243546da3691be9f9f878191c06dc036a63a41d13335a94052618338c876b63c9ff0c5c242f7fd1579ff0f81572a12ad9ded587b30aab9a02cd7234d878f730a8b000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c96fadfe67d576a000000e4ff00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

15:54:18 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:18 executing program 3:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x9)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="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"/1399], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r1, 0x0, 0xe, 0x0, &(0x7f0000000200)="0c96fadfe67d576a000000e4ff00", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40)

15:54:18 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(0x0, 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)

15:54:18 executing program 0:
r0 = socket$inet6(0xa, 0x1, 0x0)
ioctl$sock_SIOCETHTOOL(r0, 0x89f0, &(0x7f0000000340)={'bridge0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB="1100000000000000020020200000000003"]})

15:54:18 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x0, &(0x7f0000000540))
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:18 executing program 3:
r0 = socket(0x11, 0x800000003, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000200)}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5)
sendto$inet(r1, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

15:54:18 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(0x0, 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:18 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0)
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:18 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)

15:54:18 executing program 0:
r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00009e3ff6)='/dev/ptmx\x00', 0x0, 0x0)
ioctl$TCSETS(r0, 0x40045431, &(0x7f00000001c0))
r1 = syz_open_pts(r0, 0x0)
socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = dup(r2)
ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200)
ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xd)
ioctl$TCSETSF2(r1, 0x402c542d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "f0b5783ec22fd807722e4bbe2c6c5abfb6cadd"})

15:54:18 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:18 executing program 3:
r0 = socket(0x11, 0x800000003, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000200)}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5)
sendto$inet(r1, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

15:54:19 executing program 0:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
removexattr(&(0x7f0000000200)='./file0\x00', 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000004f80)=[{{&(0x7f0000000380)=@in6, 0x80, 0x0}, 0x40}, {{0x0, 0x0, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000f00)=""/202, 0xca}], 0x2, &(0x7f00000012c0)=""/234, 0xea}, 0x5}, {{&(0x7f00000013c0)=@nl=@proc, 0x80, &(0x7f0000001680), 0x0, &(0x7f00000016c0)=""/193, 0xc1}, 0x800}], 0x3, 0x10000, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0292642d09fe682728076caff13f893e555dfb717020087990cb1f1f74d043ae817e89eb86b16a0f93848e55182c14dd2354a8b6ee0f0739d7cfbbd049de26889a7a7876562388c8dac424c619e95733925f789fe371733faa7763df5ed0a35c87e379c2a356f158d22366d77e992bb9bcb18a6194e4a616ca24546bf0ebec0dc52e6ac2a97dc8ed483744edb5080000000000000046b735670b813b88d155", @ANYRESHEX, @ANYRESHEX=r4, @ANYBLOB="08000200507b2fa562f9a7c72405de942a24edd3afff201ed6266813e2bcf5a2b9421b1d72ece43b816d1bb81cccd59b94009c1b4556baa8393c40ff2d3c753350", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="080001", @ANYRES32], 0xa, 0x2)
sendmsg$IPSET_CMD_GET_BYNAME(r4, &(0x7f0000000540)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000e06010200000000000000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write(r3, &(0x7f0000000340), 0x41395527)
r5 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0)
r6 = socket$netlink(0x10, 0x3, 0x0)
writev(r6, &(0x7f00000001c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000100)={0xad2})
writev(r6, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

15:54:19 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:19 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:19 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:19 executing program 3:
r0 = socket(0x11, 0x800000003, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x4)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x0, &(0x7f0000000200)}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5)
sendto$inet(r1, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

15:54:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)

15:54:19 executing program 0:
clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
wait4(0x0, 0x0, 0x80000000, 0x0)
r0 = getpid()
tkill(r0, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0x96, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x78)
r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x0, 0x0)
ioctl$void(r1, 0xc0045878)

15:54:19 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)
recvmsg(0xffffffffffffffff, 0x0, 0x0)

15:54:19 executing program 3:
r0 = socket(0x11, 0x800000003, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0xffe}], 0x1}, 0x4)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4)
bind$inet(r1, &(0x7f0000000280)={0x2, 0x4e23, @broadcast}, 0x10)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x83b895581628fca4, 0x0, 0x0, 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0)
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5)
sendto$inet(r1, &(0x7f00000012c0)="0c260d927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x20c49a, 0x0, 0x27)

15:54:19 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:19 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, r3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0xb, 0xffffffffffffffff, 0x8)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x15, 0x0, &(0x7f0000000040))
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000340)=""/249, &(0x7f00000000c0)=0xf9)
add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600), 0x0, 0x0)
socket$alg(0x26, 0x5, 0x0)
accept4(0xffffffffffffffff, 0x0, 0x0, 0x0)
r5 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(0xffffffffffffffff, r5, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r5, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)

15:54:19 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x1, &(0x7f0000000540)=[0x0])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:19 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x0, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:19 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:19 executing program 0:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = socket$inet6_tcp(0xa, 0x1, 0x0)
r2 = fcntl$dupfd(r0, 0x0, r1)
ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200)
msgsnd(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="01"], 0x1, 0x0)
msgrcv(0x0, &(0x7f00000000c0)={0x0, ""/147}, 0x9b, 0xd6d0c418f59fe7d3, 0x0)

15:54:20 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:20 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:20 executing program 0:
prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x9, 0x400000008d}, 0x0)
r0 = getpid()
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000008880), 0x400000000000249, 0x0, 0x0)
pipe(&(0x7f0000000300)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
write(r3, &(0x7f0000000340), 0x41395527)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0x0, 0x3}, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={r0, r3, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x30)
perf_event_open(0x0, 0x0, 0xb, 0xffffffffffffffff, 0x8)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
getsockopt$sock_timeval(r4, 0x1, 0x15, 0x0, 0x0)
getsockopt$bt_hci(r4, 0x0, 0x1, &(0x7f0000000340)=""/249, &(0x7f00000000c0)=0xf9)
add_key$user(&(0x7f0000000480)='user\x00', &(0x7f0000000280)={'syz'}, &(0x7f0000000600), 0x0, 0x0)
r5 = socket$alg(0x26, 0x5, 0x0)
accept4(r5, 0x0, 0x0, 0x0)
r6 = socket$inet_sctp(0x2, 0x5, 0x84)
dup3(0xffffffffffffffff, r6, 0x0)
setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10)
sendto$inet(r6, &(0x7f00003cef9f)='7', 0x1, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10)

15:54:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:20 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
dup(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:20 executing program 3:
r0 = socket(0x11, 0x800000003, 0x8)
sendmsg$inet(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001340)="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", 0x1000}], 0x1}, 0x4)
bind(r0, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58)
r1 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x6d, 0x4)
setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10)
sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10)
dup(0xffffffffffffffff)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
waitid(0x83b895581628fca4, 0x0, &(0x7f0000000040), 0x2, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000140)={0x0, 0x0, 0x0, 'queue0\x00'})
writev(0xffffffffffffffff, &(0x7f0000000000), 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0xc0, &(0x7f00000003c0)={0x0, <r2=>0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x4, 0x0, 0x0, 0xffff}, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x0, 0x0}}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000001c0)={0x0, 0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000180)='em1\x00', r2}, 0x30)
bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000240)='yeah\x00', 0x5)
sendto$inet(r1, &(0x7f00000012c0), 0x0, 0x20c49a, 0x0, 0x0)

15:54:20 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x0, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:20 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0)
r0 = socket$inet6(0xa, 0x3, 0x100000001)
connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={[], [], @multicast1}}, 0x1c)
socket(0x0, 0x0, 0x0)
bind$packet(0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_inet_SIOCADDRT(0xffffffffffffffff, 0x890b, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, 0x0, 0x0)
syz_open_procfs(0xffffffffffffffff, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
bind$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)
connect$inet(0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
creat(0x0, 0x0)
open(0x0, 0x0, 0x0)
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0)
fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff)
socket$inet_udp(0x2, 0x2, 0x0)
socket$inet_icmp_raw(0x2, 0x3, 0x1)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
openat(0xffffffffffffffff, 0x0, 0x0, 0x0)
getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0)
memfd_create(0x0, 0x0)
dup(0xffffffffffffffff)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0)
creat(0x0, 0x0)

15:54:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:20 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:20 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
dup(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:20 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:20 executing program 3:
r0 = socket$inet6(0xa, 0x2, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000300)=ANY=[@ANYBLOB="66696c74657200000000000000000000000000000000000000000000000000000e0000000400000098030000f8000000c8010000f8000000c8010000f8000000c8020000c8020000c8020000c8020000c80200000400000000000000000000004cc7872711511674c05009ff3488171900000000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000736974300000000000000000000000006272696467655f736c6176655f3000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d000f8000000000000000000000000000000000000000000000000002800686c00000000000000000000000000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000018000000000fe880000000000000000000000000001fe8800000000000000000000000000010000000000000000000000fdffffffffffffff0000000000000000000000000068737230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d00000000000000000000000000000000000000000000000000028004e46515545554500000000000000000000000000000000000000000000020000060000000000fe8000000000000000000000000000bbfe88000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000006272696467655f736c6176655f310000626174616476300000000000000000000000000000000000000000000000000000000000000000000000000000000000110000000000000000000000d800000100000000000000000000000000000000000000000000000030006c327470000000000000000000000000000000000000000000000000000000000000000000000000020000000000280052454a45435400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a800d0000000000000000000000000000000000000000000000000002800000000000000000000000000000000000000000000000000000000000000feffffff"], 0x1)
r1 = socket$inet6(0xa, 0x3, 0x3c)
connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c)
vmsplice(0xffffffffffffffff, &(0x7f00000008c0)=[{&(0x7f0000000800)="21e56112323ac194f23d53da9f3f58af240b31104a3c4ee138aea661b3f613e4308947013d4634ac5d52919f72b0837fecf98c858c8299cbe3c4a9f91128427e4b4e65e54ee293b7439ff1eb1d3942fd39cd720a0b16769b0554f0b347654defd796e1e9598f2a16c425d705d28b9c152e60a8f073d3e470486391c4606858f25c11a6b134274fd48ffaebaa541bb5090a093c13a3679f3c2b", 0x99}], 0x1, 0x0)
sendmsg(r1, &(0x7f0000000a40)={0x0, 0xffffff2c, &(0x7f0000000380)=[{&(0x7f00000003c0)="339a", 0x2d05}], 0x1}, 0x0)

[  382.760448][   T27] kauditd_printk_skb: 20 callbacks suppressed
[  382.760469][   T27] audit: type=1804 audit(1583855660.756:984): pid=24955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/172/bus" dev="sda1" ino=16801 res=1
[  382.847036][   T27] audit: type=1800 audit(1583855660.756:985): pid=24955 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16801 res=0
15:54:20 executing program 0:
r0 = socket$inet(0x2, 0x4000000000000001, 0x0)
setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000380)='dctcp-reno\x00', 0xb)

15:54:20 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x0, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:20 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

[  382.926458][   T27] audit: type=1804 audit(1583855660.896:986): pid=24960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/132/bus" dev="sda1" ino=16488 res=1
[  382.936375][T24966] x_tables: duplicate underflow at hook 2
15:54:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:21 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
dup(r3)
r4 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(0xffffffffffffffff, r4, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

[  383.076207][   T27] audit: type=1800 audit(1583855660.896:987): pid=24960 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16488 res=0
15:54:21 executing program 3:
prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0)
r0 = getpid()
removexattr(&(0x7f0000000200)='./file0\x00', 0x0)
sched_setattr(r0, &(0x7f0000000040)={0x30, 0x2, 0x0, 0x0, 0x9}, 0x0)
r1 = socket$inet6(0xa, 0x2, 0x0)
recvmmsg(r1, &(0x7f0000004f80)=[{{&(0x7f0000000380)=@in6, 0x80, 0x0}, 0x40}, {{0x0, 0x0, &(0x7f0000001240)=[{0x0}, {&(0x7f0000000f00)=""/202, 0xca}], 0x2, &(0x7f00000012c0)=""/234, 0xea}, 0x5}, {{&(0x7f00000013c0)=@nl=@proc, 0x80, &(0x7f0000001680), 0x0, &(0x7f00000016c0)=""/193, 0xc1}, 0x800}], 0x3, 0x10000, 0x0)
pipe(&(0x7f0000000340)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
fcntl$setpipe(r3, 0x407, 0x0)
r4 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0)
r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0)
fsetxattr$system_posix_acl(r4, 0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0292642d09fe682728076caff13f893e555dfb717020087990cb1f1f74d043ae817e89eb86b16a0f93848e55182c14dd2354a8b6ee0f0739d7cfbbd049de26889a7a7876562388c8dac424c619e95733925f789fe371733faa7763df5ed0a35c87e379c2a356f158d22366d77e992bb9bcb18a6194e4a616ca24546bf0ebec0dc52e6ac2a97dc8ed483744edb5080000000000000046b735670b813b88d155", @ANYRESHEX, @ANYRESHEX=r5, @ANYBLOB="08000200507b2fa562f9a7c72405de942a24edd3afff201ed6266813e2bcf5a2b9421b1d72ece43b816d1bb81cccd59b94009c1b4556baa8393c40ff2d3c753350", @ANYRES32, @ANYRES32, @ANYBLOB, @ANYRES32, @ANYBLOB="080001", @ANYRES32], 0xa, 0x2)
sendmsg$IPSET_CMD_GET_BYNAME(r5, &(0x7f0000000540)={&(0x7f0000000240), 0xc, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000000e06010200000000000000000500010007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000)
write(r3, &(0x7f0000000340), 0x41395527)
r6 = socket$inet6_udp(0xa, 0x2, 0x0)
setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88)
vmsplice(r2, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0)
write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc)
socket$packet(0x11, 0x2, 0x300)
bind$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14)
sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x1, 0xfffffffc, 0x3}, 0x0)
clone(0x103, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
write$FUSE_INTERRUPT(r3, &(0x7f0000000140)={0x10}, 0x10)
ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r1, 0x400c6615, 0x0)
r7 = socket$netlink(0x10, 0x3, 0x0)
writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000080)="390000001300034700bb65e1c3e4ffff06000000010000005600000025000000190004000400000007fd17e5ffff0606040000000000000000", 0x39}], 0x1)
ioctl$IMGETDEVINFO(r2, 0x80044944, &(0x7f0000000100)={0xad2})
writev(r7, &(0x7f00000001c0)=[{&(0x7f00000000c0)="390000001300034700bb65e1c3e4ffff06000000010000004500000025000000190004000400ad000200000000000006040000000000000000", 0x39}], 0x1)

15:54:21 executing program 0:
openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0)
syz_mount_image$ext4(0x0, 0x0, 0x0, 0x1, &(0x7f00000007c0)=[{&(0x7f0000000580)="62f23e748cdfecc0d3bcb88248f9f8f8e87edc5637656d6e511dcdc6041c8d8a0957939950c15c7ac6360c7820e1d5957ba4167f17600b58767db91e29eb92a20f86dddfb0f8dda322d3ddeadba924051c7894f228f090746b1a55e851e7dcaae4d8411f6806d216b4f2e7eca231a301cc0c9bb4bb5598a94336a99790d3b77dcda45483c1fb1194c56ddfddb587442754e6c815", 0x94, 0x9}], 0x0, 0x0)
creat(0x0, 0x0)
perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0)
close(0xffffffffffffffff)
io_setup(0x8, &(0x7f0000000280))
r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x4080, 0x0)
socket$inet_udplite(0x2, 0x2, 0x88)
getsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0))
ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f00000002c0))
ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000001240)={'batadv0\x00'})
sendmsg$BATADV_CMD_GET_DAT_CACHE(r0, &(0x7f0000001300)={&(0x7f0000000900), 0xc, 0x0}, 0x810)
sendmsg$BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000180), 0xc, 0x0}, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20100000, 0xabb, &(0x7f0000000100)=[{&(0x7f00000000c0)="800000003804000019000300e60100006c000000000000000100000001000000000700000040000080000000101308006d5ebe5a0000ffff53ef", 0x4db, 0x400}], 0x4801, 0x0)

[  383.189887][   T27] audit: type=1804 audit(1583855661.186:988): pid=25022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/173/bus" dev="sda1" ino=16641 res=1
15:54:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

[  383.302197][   T27] audit: type=1800 audit(1583855661.186:989): pid=25022 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16641 res=0
15:54:21 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  383.451885][   T27] audit: type=1804 audit(1583855661.296:990): pid=25082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/133/bus" dev="sda1" ino=16849 res=1
15:54:21 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x0, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:21 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:21 executing program 3:
perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10)
close(r0)

[  383.601358][   T27] audit: type=1800 audit(1583855661.296:991): pid=25082 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=16849 res=0
15:54:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
shutdown(0xffffffffffffffff, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

[  383.727062][   T27] audit: type=1804 audit(1583855661.656:992): pid=25198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/174/bus" dev="sda1" ino=16801 res=1
15:54:21 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:21 executing program 3:
write$binfmt_aout(0xffffffffffffffff, &(0x7f00000005c0)=ANY=[], 0x0)
write$FUSE_GETXATTR(0xffffffffffffffff, &(0x7f0000000080)={0x18}, 0x18)
getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0)
mkdir(&(0x7f0000000100)='./file0\x00', 0x0)
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='lowerdir=.:file0'])
openat$pidfd(0xffffffffffffff9c, 0x0, 0x0, 0x0)
clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
symlinkat(0x0, 0xffffffffffffff9c, 0x0)
open$dir(0x0, 0x8000000000006000, 0x0)
wait4(0x0, 0x0, 0x80000000, 0x0)
getpid()
mount$overlay(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000240)=ANY=[])
socket$inet6(0x10, 0x0, 0x0)
syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00')
sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, 0x0, 0x0)
r0 = open(&(0x7f000054eff8)='./file0\x00', 0x0, 0x0)
getdents(r0, &(0x7f0000077000)=""/133, 0x2800)
openat$vcsu(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsu\x00', 0x0, 0x0)
syz_open_dev$vcsa(0x0, 0x0, 0x0)

[  383.880444][   T27] audit: type=1800 audit(1583855661.656:993): pid=25198 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=16801 res=0
[  383.942305][T25322] overlayfs: overlapping lowerdir path
15:54:22 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:22 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x0, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:22 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:22 executing program 0:
r0 = socket(0x10, 0x3, 0x0)
setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f00000001c0)={0x100004}, 0xfd57)
write(r0, &(0x7f0000000380)="240000001a00110214f9f407000904191100000000020000000200000800040003000000", 0x24)

15:54:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:22 executing program 3:
clone(0x4000010006dfd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
r0 = syz_open_procfs(0x0, &(0x7f0000000080)='projid_map\x00')
r1 = gettid()
tkill(r1, 0x25)
write$P9_RFLUSH(r0, 0x0, 0x0)

15:54:22 executing program 0:
perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xa0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast=0xe0000001}}}}}, 0x0)

15:54:22 executing program 5:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff)
shutdown(r0, 0x0)
recvmmsg(r0, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:22 executing program 3:
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
r1 = dup2(r0, r0)
ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200)
clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
futex(&(0x7f0000000000), 0x8b, 0x0, 0x0, &(0x7f0000000080), 0x0)

15:54:22 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x0, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:22 executing program 4:
creat(&(0x7f0000000180)='./bus\x00', 0x0)
r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r1 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000140)={0x0, r1})
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:22 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, 0xffffffffffffffff, 0x0, 0x8000fffffffe)
r5 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r6 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r5, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r6})

15:54:22 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:22 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}]}, 0x44}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sched_rr_get_interval(0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)

[  384.898006][T25476] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
[  384.929220][T25476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  384.938864][T25476] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
15:54:23 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x0, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:23 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:23 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x0)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:23 executing program 0:
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0)
r0 = socket$nl_route(0x10, 0x3, 0x0)
sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_GROUP={0x8}, @IFLA_GSO_MAX_SIZE={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'bond_slave_0\x00'}]}, 0x44}}, 0x0)
fcntl$getownex(0xffffffffffffffff, 0x10, 0x0)
bpf$PROG_LOAD(0x5, 0x0, 0x0)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x0, 0x0}, 0x10)
bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30)
sched_rr_get_interval(0x0, 0x0)
write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, 0x0, 0x0)

15:54:23 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:23 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x0, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  385.357177][T25492] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready
15:54:23 executing program 3:
socket$inet6_tcp(0xa, 0x1, 0x0)
clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff)
request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0x6c}, &(0x7f0000001fee)='R\x05rist\xe3cusgrVid:De', 0x0)
sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180), 0x1, 0x0, 0x0, 0x48d1}, 0x400c010)

15:54:23 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x0)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  385.453360][T25492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[  385.470558][T25492] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
15:54:23 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x0, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:23 executing program 3:
r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0)
r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0)
ioctl$KVM_CREATE_IRQCHIP(r1, 0xae49)

15:54:24 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:24 executing program 0:
syz_emit_ethernet(0x36, &(0x7f0000000280)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty}, @timestamp={0x11, 0xff}}}}}, 0x0)

15:54:24 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x0)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:24 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:24 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x3ff, 0x0, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:24 executing program 3:
sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0)
ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000200)=<r0=>0x0)
epoll_create1(0x0)
fanotify_mark(0xffffffffffffffff, 0x1000010, 0x0, 0xffffffffffffffff, 0x0)
write$FUSE_BMAP(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, 0x0, {0xb318}}, 0x18)
sysfs$3(0x3)
r1 = perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x8, 0x0, 0x2, 0x20001, 0x0, 0xfffe}, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8)
ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000840)={0x4, 0x826, &(0x7f0000000780)="3b8020c8021d175523b3c72602eea19465444d98e3e6b0e2d257eb8e4c2cb5f7ee243b5e93d46e68d70ce3adc821", &(0x7f00000007c0)="ab28a6d25c06ef992df73ec6ef55d08a4f04192d371477c48a42019de93d205234e8396adb715e9f38f020b269a3bc93199054b8d0ff42ffe532f18f54f9b305f5d2e083eef86c3a95ff013d245d1dffe603c5d447c0ad677cf341cac7b7dfba6d2d20c050", 0x2e, 0x65})
r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x60104, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
syz_read_part_table(0x725, 0x0, 0x0)
prctl$PR_GET_DUMPABLE(0x3)
r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x3, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x50000}]})
r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
statx(r4, &(0x7f0000000080)='./file0\x00', 0x4000, 0x80, &(0x7f0000000280))
r5 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r5)
sync_file_range(r5, 0x8, 0x8c800000, 0x3)
r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0)
statx(r6, &(0x7f0000000080)='./file0\x00', 0x4000, 0x80, &(0x7f0000000280))
r7 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
dup2(0xffffffffffffffff, r7)
r8 = signalfd4(r7, &(0x7f0000000180), 0x8, 0x800)
r9 = memfd_create(&(0x7f00000001c0)='+self\\\x00', 0x1)
r10 = open(&(0x7f0000fa3000)='./file0\x00', 0x0, 0x0)
statx(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x4000, 0x80, 0x0)
ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r10, 0x40106614, &(0x7f0000000000))
r11 = syz_open_dev$tty1(0xc, 0x4, 0x2)
sendmmsg$unix(r4, &(0x7f0000000700)=[{&(0x7f0000000100)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000000000), 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1c0000000100000001000000", @ANYRES32, @ANYRES32=r6, @ANYRES32=r8, @ANYRES32=r2, @ANYBLOB="00f4deff0000000000000000", @ANYRES32, @ANYBLOB="240000000100000001000000", @ANYRES32=r9, @ANYRES32=r3, @ANYRES32=r1, @ANYRES32=r10, @ANYRES32, @ANYRES32=r1], 0x50, 0x8000}, {0x0, 0x0, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB, @ANYRES32=r11], 0x4, 0x14008081}], 0x2, 0x20040851)

15:54:24 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10)
close(r0)

15:54:25 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:25 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:25 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(0x0, 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:25 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:25 executing program 3:

15:54:26 executing program 5:
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:26 executing program 0:
perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = socket$alg(0x26, 0x5, 0x0)
bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'ghash\x00'}, 0x58)
setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="285474dae6badf3ab85f04000000d2eb", 0x10)
close(r0)

15:54:26 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:26 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(0x0, 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:26 executing program 3:

15:54:26 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x100000000, 0x0, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:26 executing program 3:

15:54:26 executing program 0:

[  388.460582][   T27] kauditd_printk_skb: 26 callbacks suppressed
[  388.460675][   T27] audit: type=1804 audit(1583855666.456:1020): pid=26186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/141/bus" dev="sda1" ino=17071 res=1
15:54:26 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

[  388.586321][   T27] audit: type=1800 audit(1583855666.456:1021): pid=26186 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17071 res=0
15:54:26 executing program 3:

15:54:26 executing program 0:

15:54:26 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(0x0, 0xf2, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  388.890089][   T27] audit: type=1804 audit(1583855666.886:1022): pid=26405 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/142/bus" dev="sda1" ino=17090 res=1
[  388.996134][   T27] audit: type=1800 audit(1583855666.926:1023): pid=26405 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17090 res=0
15:54:27 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:27 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:27 executing program 3:

15:54:27 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:27 executing program 0:

15:54:27 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

[  389.946071][   T27] audit: type=1804 audit(1583855667.946:1024): pid=26413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir212201906/syzkaller.3BaxAZ/183/bus" dev="sda1" ino=17077 res=1
15:54:28 executing program 3:

15:54:28 executing program 0:

[  389.985785][   T27] audit: type=1800 audit(1583855667.946:1025): pid=26413 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="bus" dev="sda1" ino=17077 res=0
[  390.059180][   T27] audit: type=1804 audit(1583855667.966:1026): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/143/bus" dev="sda1" ino=17103 res=1
15:54:28 executing program 0:

15:54:28 executing program 3:

[  390.168565][   T27] audit: type=1800 audit(1583855667.976:1027): pid=26419 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17103 res=0
15:54:28 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:28 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  390.482761][   T27] audit: type=1804 audit(1583855668.476:1028): pid=26439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir958189196/syzkaller.V9dEFp/144/bus" dev="sda1" ino=17077 res=1
[  390.545518][   T27] audit: type=1800 audit(1583855668.516:1029): pid=26439 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="bus" dev="sda1" ino=17077 res=0
15:54:29 executing program 5:
perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2)
r1 = dup2(r0, r0)
shutdown(r1, 0x0)
recvmmsg(r1, &(0x7f0000000000), 0x4000223, 0x0, 0x0)

15:54:29 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:29 executing program 0:

15:54:29 executing program 3:

15:54:29 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x5, 0x0, 0x0, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

15:54:29 executing program 2:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140))
io_setup(0x83, &(0x7f00000003c0)=<r2=>0x0)
io_submit(r2, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r3 = socket$inet6(0xa, 0x3, 0xff)
shmctl$IPC_INFO(0x0, 0x3, 0x0)
connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r4 = dup(r3)
r5 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r4, r5, 0x0, 0x8000fffffffe)
r6 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0x0, 0x541000)
r7 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r6, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r7})

15:54:29 executing program 3:

15:54:29 executing program 0:

15:54:29 executing program 3:

15:54:29 executing program 4:
r0 = creat(&(0x7f0000000180)='./bus\x00', 0x0)
r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x200002, 0x0)
r2 = openat$null(0xffffffffffffff9c, 0x0, 0x0, 0x0)
sendmsg$key(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=ANY=[], 0xffffffffffffff4d}}, 0x0)
ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000140)={0x0, r2})
io_setup(0x83, &(0x7f00000003c0)=<r3=>0x0)
io_submit(r3, 0x4110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}])
perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
r4 = socket$inet6(0xa, 0x3, 0xff)
shmget$private(0x0, 0x1000, 0x0, &(0x7f0000ffd000/0x1000)=nil)
connect$inet6(r4, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c)
r5 = dup(r4)
r6 = open(&(0x7f0000000040)='./bus\x00', 0x4000, 0x0)
sendfile(r5, r6, 0x0, 0x8000fffffffe)
r7 = syz_open_dev$audion(&(0x7f00000001c0)='/dev/audio#\x00', 0xf2, 0x541000)
r8 = syz_open_dev$rtc(&(0x7f00000002c0)='/dev/rtc#\x00', 0x8, 0x80100)
ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r7, 0xc01864c6, &(0x7f0000000300)={&(0x7f0000000200)=[0x0, 0x5, 0x0, 0x7ff], 0x4, 0x800, 0x0, r8})

15:54:29 executing program 0:

15:54:29 executing program 1:
r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0)
ioctl$SNDRV_TIMER_IOCTL_TREAD(r0, 0x40045402, &(0x7f0000000180)=0x1)
ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000040)=""/82)
ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0)
r1 = socket$inet6(0xa, 0x1, 0x8010000000000084)
bind$inet6(r1, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c)
setsockopt$sock_linger(r1, 0x1, 0xd, 0x0, 0x0)
perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0)
ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2)
ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000003c0)={[0x469, 0x3fc70e73, 0x6, 0x7, 0x5, 0x3, 0x5, 0x0, 0x0, 0x100000000, 0x3ff, 0x1, 0x0, 0x10001, 0x712350ad, 0x20], 0xd000, 0x14a10})
ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000140))
listen(r1, 0x7)
prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b)
r2 = socket$inet6_sctp(0xa, 0x1, 0x84)
r3 = accept4(r1, 0x0, 0x0, 0x0)
setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000001c0)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c)
ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000))
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000240)={0x1, 0x1, [0x3, 0x3, 0x100, 0x8, 0xfffff000, 0xfffff365, 0x4, 0x101]})
syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x480)
r5 = gettid()
waitid(0x0, r5, &(0x7f0000000340), 0x2, 0x0)
socket(0x10, 0x3, 0x0)
sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000140), 0x4924b68, 0x0)
io_uring_setup(0x0, 0x0)
fcntl$setown(r2, 0x8, 0x0)
sendto$inet6(r2, &(0x7f0000000040), 0x0, 0x40004, 0x0, 0x0)
setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, 0x0, 0x0)
close(r3)

[  392.411606][  T657] ==================================================================
[  392.419729][  T657] BUG: KCSAN: data-race in schedule_hrtimeout_range_clock / watchdog
[  392.427764][  T657] 
[  392.430078][  T657] write to 0xffff8881228b5050 of 8 bytes by task 7920 on cpu 0:
[  392.437690][  T657]  schedule_hrtimeout_range_clock+0x14f/0x1f0
[  392.443746][  T657]  schedule_hrtimeout_range+0x30/0x50
[  392.449116][  T657]  poll_schedule_timeout.constprop.0+0x71/0xc0
[  392.455254][  T657]  do_select+0xd7e/0x1020
[  392.459580][  T657]  core_sys_select+0x2c7/0x5f0
[  392.464326][  T657]  do_pselect.constprop.0+0x125/0x160
[  392.469678][  T657]  __x64_sys_pselect6+0x12a/0x160
[  392.474714][  T657]  do_syscall_64+0xc7/0x390
[  392.479202][  T657]  entry_SYSCALL_64_after_hwframe+0x44/0xa9
[  392.485094][  T657] 
[  392.487407][  T657] read to 0xffff8881228b5050 of 8 bytes by task 657 on cpu 1:
[  392.494839][  T657]  watchdog+0x2b8/0x960
[  392.498978][  T657]  kthread+0x1cb/0x1f0
[  392.503036][  T657]  ret_from_fork+0x1f/0x30
[  392.507434][  T657] 
[  392.509737][  T657] Reported by Kernel Concurrency Sanitizer on:
[  392.515870][  T657] CPU: 1 PID: 657 Comm: khungtaskd Not tainted 5.6.0-rc1-syzkaller #0
[  392.524028][  T657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  392.534064][  T657] ==================================================================
[  392.542118][  T657] Kernel panic - not syncing: panic_on_warn set ...
[  392.548714][  T657] CPU: 1 PID: 657 Comm: khungtaskd Not tainted 5.6.0-rc1-syzkaller #0
[  392.556886][  T657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  392.566921][  T657] Call Trace:
[  392.570239][  T657]  dump_stack+0x11d/0x187
[  392.574562][  T657]  panic+0x210/0x640
[  392.578444][  T657]  ? detach_if_pending+0x140/0x290
[  392.583551][  T657]  ? vprintk_func+0x89/0x13a
[  392.588178][  T657]  kcsan_report.cold+0xc/0x14
[  392.592842][  T657]  kcsan_setup_watchpoint+0x3e3/0x420
[  392.598227][  T657]  watchdog+0x2b8/0x960
[  392.602383][  T657]  ? __read_once_size.constprop.0+0x20/0x20
[  392.608267][  T657]  kthread+0x1cb/0x1f0
[  392.612319][  T657]  ? kthread_unpark+0xd0/0xd0
[  392.616980][  T657]  ret_from_fork+0x1f/0x30
[  392.622617][  T657] Kernel Offset: disabled
[  392.626944][  T657] Rebooting in 86400 seconds..