42400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/pfkey\x00', 0x40, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r4, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x78, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x10000}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'ovf\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x69}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x65}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x6}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x22}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x8080}, 0x840) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000000)={0xfffffffffffeffff}) 03:55:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0xe000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000140)={0x7, 0x70, 0x1, 0x8000, 0x20, 0x3f, 0x0, 0x0, 0x80000, 0x4, 0x6, 0x9, 0x401, 0x2, 0x100000001, 0x800, 0x8, 0xfffffffffffffff9, 0x2, 0x2, 0x7fffffff, 0x8001, 0x80000000, 0x22, 0x7ff, 0xdc, 0x40, 0xfffffffffffffffb, 0xfffffffffffff000, 0x100, 0xeb, 0xffffffffffffff11, 0x4, 0x4, 0x0, 0x6, 0x81, 0x1f, 0x0, 0x1b000000000000, 0x0, @perf_bp={&(0x7f0000000080), 0xd}, 0x2002, 0x1, 0x1, 0x0, 0xfffffffffffffffa, 0x4089, 0x40}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) r4 = add_key$user(&(0x7f0000000240)='user\x00', &(0x7f0000000340)={'syz', 0x0}, &(0x7f0000000380)="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", 0x1000, 0xfffffffffffffff9) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000001380)={{{@in6=@dev, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in6=@local}}, &(0x7f0000001480)=0xe8) r6 = getgid() keyctl$chown(0x4, r4, r5, r6) write$P9_RUNLINKAT(r3, &(0x7f00000000c0)={0x7, 0x4d, 0x2}, 0x7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup2(r0, r1) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$BLKPBSZGET(r2, 0x127b, &(0x7f0000000240)) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) r4 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x9, 0x2080) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000340)={r5, @in={{0x2, 0x4e22, @loopback}}, 0x3f, 0x9}, &(0x7f0000000140)=0x90) fcntl$getownex(r3, 0x10, &(0x7f0000000180)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:11 executing program 2: mount(&(0x7f0000000000)=ANY=[@ANYBLOB='/dwv/sg0\x00'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='anon_inodefs\x00', 0x4000, &(0x7f0000000340)='/dev/kvm\x00') r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = syz_open_dev$dmmidi(&(0x7f0000000380)='/dev/dmmidi#\x00', 0x6, 0x10400) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f00000003c0), 0xffffffffffffffff) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000180)={@loopback, @rand_addr}, &(0x7f0000000240)=0xc) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) ioctl$BLKRESETZONE(r3, 0x40101283, &(0x7f0000000080)={0x2, 0x49f2c5fa}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='schedstat\x00') setsockopt$inet6_udp_encap(r3, 0x11, 0x64, &(0x7f0000000080)=0x5, 0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x2, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000340)={{{@in, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in6=@local}}, &(0x7f0000000180)=0xe8) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000240)={r4, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) r5 = getpid() ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r5, 0x1d9, &(0x7f0000000080)={0x6}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x4000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:11 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x100000001, 0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r3, 0x40405514, &(0x7f0000000080)={0x4, 0x5, 0x6, 0x3, 'syz0\x00', 0x97f0}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) r3 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_inet_SIOCGIFBRDADDR(r3, 0x8919, &(0x7f0000000000)={'tunl0\x00', {0x2, 0x4e21, @broadcast}}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000000080)={'ip6tnl0\x00', 0x3}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x1, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 03:55:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000000)={0xa15, 0x3, 0x2}) 03:55:12 executing program 2: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x4400, 0x0) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x8100]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0xe}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:12 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000000)={'ipvs\x00'}, &(0x7f0000000080)=0x1e) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000000)='fou\x00') 03:55:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f0000000340)={{0xf002, 0x5000, 0x3, 0x7fffffff, 0xfff, 0x0, 0x7, 0x8, 0x9, 0x0, 0xd1, 0x1}, {0x10000, 0x5004, 0xa, 0x8001, 0xe7, 0xffffffffffffffff, 0x1, 0x2, 0x1, 0x6, 0x4, 0x100000001}, {0x0, 0x6000, 0x0, 0x9, 0x8000, 0x5, 0x5, 0x81, 0x7, 0x0, 0x6f2d}, {0x4000, 0xf001, 0x0, 0x7ec, 0x3, 0x5, 0x60a1, 0x62d7, 0x6d9, 0xffffffffffff8001, 0x5, 0x8}, {0x0, 0x100000, 0xf, 0x6, 0x20, 0x1ff, 0xfffffffffffff101, 0xf1, 0x100000000, 0x80000000, 0xcf50, 0x8ea7}, {0xd000, 0x5001, 0xd, 0x5, 0x5, 0x101, 0x8, 0x5, 0x101, 0x7, 0x2b, 0x5}, {0x3000, 0x10000, 0x0, 0x6, 0x9fd, 0x53eedc98, 0xa3b6, 0x4, 0x380e, 0x9, 0xfffffffffffffffb, 0xe7}, {0x100000, 0x7001, 0xd, 0x1, 0x708c33b3, 0x6, 0x147009d, 0x6, 0x1, 0x3, 0x874, 0x5}, {0x104000, 0x5000}, {0x10000, 0x115000}, 0x40035, 0x0, 0x0, 0x2000, 0x4, 0x800, 0x10000, [0xf337, 0xfffffffffffffff9, 0xffffffffffffff93, 0x1942f286c0000]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x80, 0x50) getsockopt$inet_sctp6_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f00000000c0), &(0x7f0000000140)=0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x8000, 0x0) 03:55:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000200)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000080), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = perf_event_open(&(0x7f0000000140)={0x7, 0x70}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, r2, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r3, 0x2401, 0x6fff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x21) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:55:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x40000000}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:13 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:13 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x440000, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000340)={0x0, 0x200, 0xffff, 0x4, 0x7fff, 0x8, 0x38b, 0x7, {0x0, @in6={{0xa, 0x4e20, 0x1, @ipv4, 0xfc}}, 0x40, 0x7f, 0xd2, 0x0, 0xfff}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x0, 0x1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000400)={r3, 0x4, 0xffffffffffffffff, 0x4d6, 0x10000, 0x842, 0x2, 0xffff, {r4, @in6={{0xa, 0x4e22, 0x100000001, @mcast2, 0x3}}, 0xffffffffffff1b28, 0xe42, 0x7, 0xd80, 0xd1c}}, &(0x7f0000000240)=0xb0) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000080)={0x200000, 0x8}) write$P9_RREAD(r2, &(0x7f00000004c0)={0x99, 0x75, 0x1, {0x8e, "dd9d8cbf2076a0b88732391c7dc0c746b4ab6ba7c2c6cc6261789b003ac852ed60b0ca7ff40298fd9688825b544a0ab0b038498efd5d118ba91f2a8b7e87dada6659c819c15eb23b6476752e8db66978ab3cbad80b1882a7810a3d64f8c801d24a4107bce4e0a3007678198f102261b8e008a08d827876a3dd38c8a50f68ad151a609de48b8284bb57130a5948c1"}}, 0x99) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:55:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xffffffffffffffe0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000180), &(0x7f0000000240)=0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfff, 0x1) ioctl$EVIOCGREP(r4, 0x80084503, &(0x7f0000000080)=""/86) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x252000, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x20, &(0x7f0000000080)=[@in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xd}}, @in={0x2, 0x4e22}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000180)={0x3, 0x200, 0x7, 0x1ff, r4}, 0x10) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) r3 = getpid() sched_getaffinity(r3, 0x8, &(0x7f0000000300)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f0000000340)) r3 = add_key(&(0x7f0000000000)='blacklist\x00', &(0x7f0000000080)={'syz', 0x0}, &(0x7f0000000140)="526566260f9dd9304c2d88aa0e6952482b28b2edafb2f6d002f312df16b7b915792c1be31c533ca9b42f1140f67480b78e1069cbf874aad7ca2878b0b8d7926f33c2046b69e84657f6d7c111", 0x4c, 0xfffffffffffffffc) r4 = add_key(&(0x7f00000000c0)='pkcs7_test\x00', &(0x7f0000000240)={'syz', 0x3}, &(0x7f0000000740)="0d4123bfacced2be392da684d0166ff28e74b0446e7a5ffc854e7ed6420c80fe31c395e6742190ee79aaa4b3e624c379f3400c82d24e0d1f8a31a81b0322376b99b647269d6e3f8316178e50b45c00bc253175a4ffabf58d39651b634d73422c30188370ea1b4fdd999e9634f15721a18a94e3beb14a5c64e26d6bac3607d52082ad", 0x82, 0xfffffffffffffff8) keyctl$unlink(0x9, r3, r4) 03:55:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3f, 0x200000) openat(r2, &(0x7f00000000c0)='./file0\x00', 0x1, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) 03:55:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x1f00}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:14 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000080)={0x1ff, 0x4}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080)=0x200, 0x4) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) r4 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0x8000, 0x40) ioctl$SG_EMULATED_HOST(r4, 0x2203, &(0x7f0000000140)) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000000)=@req={0x7fff, 0x800, 0x80000000, 0x9}, 0x10) 03:55:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x8801, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r3, 0x0, 0x41, &(0x7f0000001840)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000000000000000000000a5000000652a967de2594b5f51dc269fed9e110ef438becc7a90fd2658654ee824c8fd4cf0493fa99503f5af439828a104430e0877f30af2b2fecfc4ff3fa98afadca93c3fd3dd934236fd538929d2b74350129639fcddd7afa5fb922154e32bad96be8702c9274740d3b0ed29754028d528460ee9db53e06c0500000090631cf2f52df9d16847d0fb193b15b520aa629726e0be36a63f5240ce5e158a1b118fc15b9986b4ecca71c6"], &(0x7f0000001940)=0xc9) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x80200, 0x0) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000240)=0x0) stat(&(0x7f0000001640)='./file0\x00', &(0x7f0000001680)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001700)={0x0, 0x0, 0x0}, &(0x7f0000001740)=0xc) sendmsg$unix(r4, &(0x7f0000001800)={&(0x7f0000000140)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000015c0)=[{&(0x7f00000000c0)}, {&(0x7f0000000340)="1e1d8f28567a38cda648115b1b74b35bf07b737d825238d3f1d5f8306e48e765d9a263728ed39c4e4216cc9fa2edeab94534c930e8de9839c05b29257afe956e272b36a0fda4c1fceed1e42e034fc71e814b9d102cc0a71984d3f9dfeb88af9eb23e504ec96d288de8f9173817bb00a178072b3bff7b216595b22125c0c7c2a81fea24400a3f96d3ea14c558d84950fd61e389adcb70cee3a4c5bf483f71313e44b6341df0f00047719df23f9e500f6e06d76bb901a38d0b798be9727f0a82949a4e", 0xc2}, {&(0x7f0000000440)="352e295df3efcd38024d1c744618759706c80bf3e79b67b44d47fba8b8bbe117d45a98040fcd303b1e772f0fb1a6008805f69d5716fee1a8c3cc7f4233d139f43f867ed82c1e331840c963671ec984b690df5430f4bb54884c8d37ccdb97c35b1bf0ce08e22c", 0x66}, {&(0x7f00000004c0)="dccb248aedbfd7714108fb791da2bf249b48edde82db6a2abb7f13e25ccc0391e609da0d89537a4cdd39cc943459edfe7888fa013cf13f4f389c93f1f07588a218b5badb4b5364f6fcbc3fbe2d611fe62ad72aeca536f946227128c784365de5d6e79bb939ce0a16c89d5d8d723bdd18013e714778699fce3aedc88177d4ab8abe096883e1c81531ab71b49b4b5bf713a065ab9224f00a63452d4d8894f71faefd51d5bd051f7285f130aebf58b965a853c7da289dde6baf83151a834e7a2abfcef9c55cbf658a686e3679459a19026ed67d1a662c5107bef799164113fb21199e6ecdf5dbcd3a7619a8573672910c8470a1017db94afe42", 0xf8}, {&(0x7f00000005c0)="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", 0x1000}], 0x5, &(0x7f0000001780)=ANY=[@ANYBLOB="280000000000127204b358c6dd7680a9", @ANYRES32=r0, @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r4, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r4, @ANYRES32=r2, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r5, @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB='\x00\x00\x00\x00'], 0x78}, 0x4000000) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r4, 0xc0305710, &(0x7f0000000080)={0x1, 0x9ca1, 0x6, 0xff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) fsetxattr$security_smack_entry(r0, &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f00000000c0)='/dev/kvm\x00', 0x9, 0x2) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x100, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000000)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) 03:55:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x400000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x6963f50, 0x21, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) set_tid_address(&(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x0, 0x4]}) r3 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xfffffffffffff800, 0x10080) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000080)={0x8, 0x3, 0x71, 0xebf4, 0x3, 0x9}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:15 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0x10000, 0x11000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) fcntl$notify(r2, 0x402, 0x80000000) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x40, 0x0) setsockopt$inet6_dccp_buf(r3, 0x21, 0x0, &(0x7f00000000c0)="97d30860b4039634207a02", 0xb) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:15 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x6, 0x80002) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000080)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x8000, 0x44) write$P9_RLOPEN(r2, &(0x7f0000000180)={0x18, 0xd, 0x1, {{0x4, 0x4, 0x5}, 0x5}}, 0x18) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$LOOP_GET_STATUS64(r5, 0x4c05, &(0x7f0000000340)) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={r4, 0x0, 0x3ff, 0xffffffffffff0001, 0xffffffff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r5, 0x8040ae9f, &(0x7f0000000080)) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x40, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, &(0x7f00000000c0)={0x0, {0x10001, 0x8, 0x3a, 0x63c, 0x3, 0xfffffffffffffc00}}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x121900, 0x0) ioctl$UI_DEV_DESTROY(r4, 0x5502) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) fsetxattr$trusted_overlay_opaque(r3, &(0x7f0000000080)='trusted.overlay.opaque\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x0, 0x0, 0x80000001]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:16 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) r3 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r3, 0xffefffffffffff7f) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r4, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) write$binfmt_misc(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="d2"], 0x1) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000080)={0x0, 0x0, 0x30}, 0xc) sendmmsg(r4, &(0x7f0000007ac0)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f00000001c0)='A', 0x1}], 0x1, &(0x7f0000000540)}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000100)={0x0, 0x2}, 0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r4, 0x84, 0xa, &(0x7f0000000200)={0x3}, 0x20) write$binfmt_misc(r4, &(0x7f0000000300)=ANY=[@ANYBLOB='s'], 0x1) write$binfmt_misc(r4, &(0x7f0000000240)={'syz1'}, 0x34000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0xffffffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:16 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x4c, 0x3, 0x3}, 0x2}}, 0x18) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_SET_DEBUGREGS(r3, 0x4080aea2, &(0x7f0000000080)={[0x0, 0xf000, 0x105000, 0x4000], 0x6993, 0x11, 0x6}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x80000, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x3}, &(0x7f0000000340)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={r3, @in={{0x2, 0x4e24, @loopback}}, 0x4, 0xfff, 0x0, 0x0, 0x1a}, &(0x7f0000000440)=0x98) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000000c0)={0xa, &(0x7f0000000140)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0xc0000, 0x0, [0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc]}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000000)={0x0, 0x200, 0x100000001, 0x100}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) epoll_create1(0x80000) 03:55:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000080)='./file0\x00', 0x7d) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000140)=0x8) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x101000, 0x0) r2 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) ioctl$LOOP_SET_FD(r2, 0x4c00, r2) r3 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x1, 0x400400) mkdirat$cgroup(r3, &(0x7f0000000080)='syz0\x00', 0x1ff) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000180)='IPVS\x00') sendmsg$IPVS_CMD_SET_DEST(r3, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="000827bd7000fedbdf250600000008000400bc0100004800030008000800e200000008000800ff000057610008000300ba343a8b6479aef3b468d7040000000800010000000000080007004e2100001400060000000000000000000000ffffff"], 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x44) r5 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r6, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r5, r6, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000340)=0x5, 0x4) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) 03:55:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x1f, &(0x7f0000000180), 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000000)=0x104000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x4000000000000000) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x101000) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) get_robust_list(r4, &(0x7f0000000240)=&(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)}}, &(0x7f0000000340)=0x18) ioctl$UI_SET_PROPBIT(r3, 0x4004556e, 0x17) ioctl$KVM_SET_CPUID2(r3, 0x4008ae90, &(0x7f0000000380)={0x8, 0x0, [{0xc0000000, 0x7fff, 0x7, 0x3, 0xa979, 0x4, 0x6851}, {0x8000001f, 0xfffffffffffffffb, 0x1, 0xd4f8, 0x5, 0x3}, {0x8000001d, 0x2, 0x5, 0x5, 0x7ff, 0xffff, 0xa38}, {0x0, 0x7, 0x1, 0x6, 0xffff, 0x7, 0x5}, {0xc0000001, 0x42e0, 0x7, 0x9, 0xf190, 0x8001, 0x32fa}, {0xc000000b, 0x7, 0x4, 0x9, 0x93, 0x0, 0x40}, {0x1, 0x80000000, 0x3, 0xf49, 0x0, 0x8001, 0x2}, {0xa, 0x1, 0x6, 0xd7, 0x7, 0x3, 0x2}]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:17 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f00000000c0)={0x0, 0x0}) fcntl$setownex(r0, 0xf, &(0x7f0000000140)={0x3, r1}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xff, 0x100) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$DRM_IOCTL_WAIT_VBLANK(r2, 0xc018643a, &(0x7f0000000080)={0x3f, 0xc000000, 0x39}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:55:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = dup3(r2, r2, 0x80000) setsockopt$EBT_SO_SET_COUNTERS(r3, 0x0, 0x81, &(0x7f0000000340)={'broute\x00', 0x0, 0x0, 0x0, [], 0x2, &(0x7f0000000000)=[{}], 0x0, [{}, {}]}, 0x98) 03:55:18 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40000, 0x0) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) write$evdev(r3, &(0x7f0000000140)=[{{0x0, 0x7530}, 0x16, 0xfffffffffffffff9, 0xfffffffffffffffd}, {{0x0, 0x7530}, 0x11, 0x8, 0x101}, {{0x0, 0x2710}, 0x17, 0x7, 0xffffffff}, {{r4, r5/1000+10000}, 0x14, 0x8, 0x7}, {{0x77359400}, 0x4, 0x100, 0x1f}], 0x78) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x3002}], 0x1, &(0x7f0000000240)={0x77359400}, &(0x7f0000000340)={0x9}, 0x8) 03:55:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x1f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x2001, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r3, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x4, 0x30, 0x9, 0x6}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000240)={r4, 0x8, 0x20}, &(0x7f0000000400)=0xc) setsockopt$inet6_dccp_buf(r3, 0x21, 0xf, &(0x7f00000000c0)="e51b37b946b6df8f75ecdf4be6ef7c0190832dc9e9903c4c9eb70d4450f3370f", 0x20) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) r5 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r3, 0x6, 0x21, &(0x7f0000000680)="7b9ce9cc2cf8c3d76e88457c8db924da", 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000640)={'ifb0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[@ANYBLOB="4c0000002e0000002bbd7000fedbdf2500000000", @ANYRES32=r6, @ANYBLOB="0b0021ff08000000000008000b00fe02f6ff07000b00ffffff7f08000b00cc00000008000b0000000007000000000081c71ec4ee56315f000056cb764972"], 0x4c}, 0x1, 0x0, 0x0, 0x80}, 0x40014) r7 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0xef9e, 0x18000) sendto$inet(r5, &(0x7f0000000340)="a8b38debd64479153cf9ebf2c66b945780a1991465d4631b96b5bb526871d8bff00d16fa89208127353b426a0a142a200cec12c1ea467f44c14f4459305119f3cd900ec0aa8eb3c0aee3db79ff40105b85605735a3304ae407cf749decaafd33e24650a7caa39126afe35f444e6f2dcdceb4685ff836500ef11dcc170a48b2de09b89a8ab8712355bae89d28f2b7cec9b40c635f13eb2df48b76c3d328f4c10b81f0b89c80a45409a69fdc", 0xab, 0x8000, 0x0, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r7, 0x4040aea0, &(0x7f00000006c0)={0x0, 0x646, 0x6, 0x0, 0x200, 0x7fff, 0x8, 0xffff, 0x4, 0x2, 0x7c, 0x8, 0x0, 0x77a2, 0x2, 0x1, 0x7, 0x200, 0x80}) ioctl$KVM_RUN(r2, 0xae80, 0x0) getpeername$packet(r7, &(0x7f0000000800), &(0x7f0000000840)=0x14) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000000480)={{{@in6=@loopback, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000000580)=0xe8) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f00000005c0)={@mcast1, r8}, 0x14) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000000)={0x7ff, 0x3, 0x5e4, @remote, 'bond_slave_1\x00'}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000400)=ANY=[@ANYBLOB="04000000000000000700008000000000090000000000000000000000f9ffffff08000000000002000000000000000000030000c0080000000200000008000000ff01000002000000120700000000000000000000000000000a000000000d00000400000008000000010000000700000006000000000000000000000000000000000000000000000004000000050000007b00000004000000000000000000000000000000000000005d846ba9e18295285fb08e62511d630928ec139c7d27f3"]) r3 = memfd_create(&(0x7f0000000080)='/dev/kvm\x00', 0x4) getsockname(r3, &(0x7f0000000140)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f00000000c0)=0x80) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000000), 0x106}}, 0x20) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x1]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@loopback, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000140)=0xe8) setreuid(r3, r4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:19 executing program 2: select(0x40, &(0x7f0000000380)={0x100000001, 0x800, 0x0, 0x5, 0x1c5, 0x4, 0x1, 0x3f}, &(0x7f00000003c0)={0x7, 0x8, 0x1ff, 0x1f, 0x8, 0x9c0, 0x0, 0x27}, &(0x7f0000000400)={0x3, 0x200, 0x5, 0x3c66, 0xfd, 0x5, 0x80, 0x1c97}, &(0x7f0000000440)) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000240)=[@textreal={0x8, &(0x7f0000000180)="0f65cf66b8e99ba30e0f23d00f21f86635000000000f23f8660f3a0f4f00c3660f2fab0000f30f013b660f3a426d06f90f01ca3e0fc7ad0080fb640f21a2", 0x3e}], 0x1, 0x8, &(0x7f0000000340)=[@cr0={0x0, 0x60000000}, @vmwrite={0x8, 0x0, 0x6, 0x0, 0x940, 0x0, 0x6088, 0x0, 0x1}], 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = accept(r1, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000000)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000140)={0x5, 0x100, 0xbc, 0x200, 0x9}, 0x14) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x1f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:19 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:19 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:19 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:19 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x5]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) r3 = dup(r1) ioctl$SG_GET_SCSI_ID(r3, 0x2276, &(0x7f0000000140)) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x51}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000000c0)={r4, 0x7, 0x30}, 0xc) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000180)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000000)={0x3f}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x51, &(0x7f00000000c0)=[@cstype3={0x5, 0x8}, @dstype3={0x7, 0x6}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x0, 0x0) r4 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x204000, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f00000000c0)={r2, r4}) 03:55:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x100, 0x0) r2 = dup3(r0, r1, 0x80000) setsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f0000000080)=0x60, 0x4) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x84) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:55:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x8100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:20 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x402000) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000080)={0x7, 0x80}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0xe3) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:20 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0xfffffffffffffffc, 0x10000) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000140)='net/anycast6\x00') ioctl$TIOCLINUX2(r3, 0x541c, &(0x7f0000000180)={0x2, 0x5, 0x9, 0x5, 0x5}) sendto(r0, &(0x7f0000000000)="eb66e961097c398b00bea10c208b29f471844d88cf919af97bfbadebcf7144362d1e6fc43d3dd94d19c9", 0x2a, 0xc0c1, &(0x7f0000000080)=@pppoe={0x18, 0x0, {0x4, @dev={[], 0x1d}, 'lo\x00'}}, 0x80) write$FUSE_NOTIFY_STORE(r3, &(0x7f0000000240)={0x2a, 0x4, 0x0, {0x2, 0x200, 0x2, 0x0, [0x0, 0x0]}}, 0x2a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffff9c, 0x84, 0x70, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x80008000000, @loopback, 0x5}}, [0xffff, 0x81, 0x7, 0x0, 0x4, 0xfffffffffffffeff, 0x200, 0x19e, 0x10000, 0x7, 0x81, 0x1000, 0x3, 0x3f, 0x7]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2}, 0x8) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r3, 0xc008ae67, &(0x7f0000000000)={0x9, 0xd348}) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000180)={0xbf, @remote, 0x4e20, 0x4, 'rr\x00', 0x8, 0x3, 0x6e}, 0x2c) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:21 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:21 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:21 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:22 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:22 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:22 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:22 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:22 executing program 2: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:22 executing program 2: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:23 executing program 2: socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:23 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:23 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:24 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:24 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:24 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:26 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:26 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x0, 0x0, [0x40000106]}) 03:55:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x0, 0x0, [0x40000106]}) 03:55:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x0, 0x0, [0x40000106]}) 03:55:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79}) 03:55:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79}) 03:55:28 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79}) 03:55:28 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:28 executing program 2: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect(r0, &(0x7f0000000280)=@in6={0xa, 0x0, 0x0, @remote}, 0x5f) 03:55:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x8100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x5) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) getsockname$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file1\x00', 0x8, 0x2) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003dc0)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000003ec0)=0xe8) 03:55:28 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x5) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xfffffffffffff000, 0xfffffffffffffffd}) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f0000001640)={0x8, "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", 0x1000}, 0x1006) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x4, 0x6}, {0x0, 0x4}]}, 0x14, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file1\x00', 0x8, 0x2) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000003740)={0x0, @multicast1, @dev}, &(0x7f0000003780)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003dc0)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000003ec0)=0xe8) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 03:55:29 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x0, 0x0) dup(r0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r1 = syz_open_pts(r0, 0x5) ioctl$TCSETS(r0, 0x5402, &(0x7f0000000040)={0xfffffffffffff000, 0xfffffffffffffffd}) r2 = dup3(r1, r0, 0x0) write$UHID_INPUT(r2, &(0x7f0000001640)={0x8, "e52aac313baccb9b551156a2d7c12b7711c32a17d3c4c9ceef08c2046fe288a7036e513019e5e114cc4ae935d23a9990952824f5d0c1f52e2eb94e5301ba9dc9a02818038eaef46fc2c3ebbe46e4a6024c93823f66462ba3d68913fdeadd1087b06846aa3ddf6ed3dc2b61b4960f48c2edf5cdf23c7e8d3f2e6daa71e66b29bc19e377d7df4637d735194a52da503a0ac44383ba5b3da867e09ceae02a9bfc21e7f28814c2fab7da41344e207ca706dc37592abdb685e4b80eb6dc2b1dc550a1d16166d163a4a220a54d7844facbbb2648ee90aa05c3c03ee447d79e517df8ffe70c215bd0bf69e86a5f48d571b9337590d05e9947727c0d77d18a117f110252735ca6700a55fd26838935808cce7b7c222a75339e44230bdeb99bc39c0c1cc20de74fcb9744f4c4a988f3874a846d31abcf5504d78a3e14f35f6cbd123fcff22890cc17c730c3ea9f74616dfe60064552ec25568a6211bdc39483a28bed0df0afc7d7c6d13d301e080c8846eab1a9d914b0695b16dd3009feaf204d22e32c5ecc333e616159d55328d375e59194c5c9a0b3843afb283d1d26f59e03105e91aa552386468432a09be73220e942394f34c559797b74bfe7c5c2c639a40e4d2e81e1004b127540a0bdd6be2f95698e75e4f1203a47d61f506ac9364be9d98ae46536f74afe08c450ecb902e00f188c9f32aed0677455e10bbe82c763a464f10f64c403c35376b7a675546835209f0e2809e9c2bd191f784dda4b727bfac512497a07474e6d3e13233601df81abcdb6fbfb152483ec61baaee45a5d733c62107f63c55a046401a5ddef70cef8d52cb4784e3efc34de554c8ff48f7ae3d6dc1ed4eb70fe1e610355fd66ce1a375b63b6641fb3dadfab8a9b0b1f26ca11f7287258ad4766e08340f8f2fd53e7e5f287bb73c186f0290f225687040c762776a02e5e65f1b9b713e8ef98ffe111b3e4e7b761dd3ed763ed8dafd67625fb300ac752c0ff9c0c04b75be292c3f0247bd0b3560f1c76aff38791037fcf2b812f1601934a8fc769f7198e0df685841489263a1495a8a8bab1a63cb12b3089a3e30aab15ae872437e52a6f0dbc4df2d0e8df4c6bcd47beefc179d85b70b42b319453e6efaff96a509420bec299f227c4b676c58038916897f15430ff52087dd97dd329c6b6e207378053accaa31843a333e4f69586103424f44bd67eb355c1fbe078e62f07ebaae46c3e335372127dc5fa70a4579af715e531bda52761dc206aded4678079720603a577ef7e5fb5a81a525b7c96a4047d9d6bb80d7e0ce55cc0a4f73256ae9c515307f13fe54126786de425d7a674b05116104176faac5b9365b33fd2f5a710a5159d342abecede83ad421bbb712cd5b006671a958cec907311719eb3e0b5dc4fb51054e06656a7a2a066c0aac65ceb434ca3f242cb2b1d7a22179a85cbbeeacc2f0135d8dd4d1363a98d2543fa4973e19eb359e956d27f142c75f62c7aecaf47090236b9791847725bc6fde15cd4a119a4976a3f0f2d622973ad9000aae56f88b396fa1881ec0b0a5de9955fc8f864b36eacd635b88826e0a64897d605fa4a14f7786b037cf308bef61c7f860e38f1ae67fe8cb7802dbe85f9c0c082eed1a13e645370d0c95d63bba215ac8a637b8f968aef06329d62ba131b56b46bfcfa6a5e82016d5eeb6e7db45595d1acaaa5ec9886315d3dced9d0a15c44c043ac91e4ae7077139774607b76cbc017f636145beb84c128cf35ddf4a895a56b8d141f743c9189a71387893f785804f85927a23ccd79c432ab686b621ec91706ef082b4ea4fa608ce2daca0d2e2e07ff51e6a8fdc22f1c8ee5ae53720f93b4547704fae580e5560e3c7b1ac2a38ffc294d3c96635e3b919339394843c8a171c7912ceb9c0a11be25783694b177b399e7a495538e293a59d3ab44b176afed6894aa0e501d9b98981be3f2057bf6c9869403a34cb83ad57150c674301f39524a026f3608a3414287bc4e507355823c6f8640bb803a392fb8847023d1db3c39753e72414682c617de9bd0d5b6a55d46004d49f20d2f8f53cdd8eb11402f7895cd7c01b4964fd005c564b0b0e156969ccde818dda3a7cae02d1d3af95081e6549f28976fa81b5e90fbb0a62fea850ffaf0220132189c11a74996261f6de6001c50364f08c4f48fd46a0417ec8ee4d003efeead64b87d64b43cd6868f365e72e26dd9f5f9f74d135f64464cb38dd62051ae70c5a4daabebe700eb9b290b8ed4142db0090219e6186f8f71fa8fe1ebe42f621b8eed182ee8ad0401f0a3530fd48e4d1eb2637f1fbd2a7032b0f85715203c12ab8ff48131bc4ff28272b57119a76bc0b30fef5294c23c0b2bcadfbba37a00502b5e43d72148d9acc7cb7cb39dc830cd6f30262a09eecf29d1055c2edc3926cfd5076aa5f9f172ed145359fc974ca5ded652433d212607bed155df1aff269414548a39a644b6ce927de5de6e6750575c4fd7ea7fe10b1e51fde6975c0c23fc012a8b12fe3fa64e972e4e09eafea165ae5c1ffc9d761e1314a781959c223b96eefde0f4f45c7ac032a8d3f1bd304114c3329a3e4966eddcc8d44ae70bad2932f963100955e2d2d487347c2aa8356bc6bc3c84e418163c758f1372246884e6d80d87d7ab3fe660dda13ada65f200b4fb365223b93bbc29493ae6dbbbb1823edb8e9f045b60414edab955e1046b67a8d4908ab08ad90216125d2ffd8c7814a9a4940df0a653b1cf53cf456412228445ebc8e1584adfe13207ff24fe602e2a506218710483b5544347a3d515b7d2ddcaa1bb7ae3578841918a8ed00659d5f260d23ae17a9ffc77f79758844586fe53517097838a92dde8873e8be1cd5934f1a4bfdd9d0b5725b811c4a2c121b7729946993a736bd195c55684ea680304af4844a1b2f74e2c2b2ccaeceb00b9c2c515b70912efb27643c5624025e358b44853cc0efddc103ee514471af902cd9b68f102c95a91d2b825b473ce842e6367b0b7305ce8be6f9c812abe860bb632e00b69a0370e5c8f9ba0cebbcbe1b9276949c303a4e9e3b6db37a0716520c07512192364abb58399fca973a1b32106096eda8bb85745562e8a35c5e917fdf858091a4c29d6549e10098d6b205fc5cad546fe07b3a70756cf7079c88f3708f0c8527002b99e80cbd584a3737fb37953cd6dccf21add4d4b6e65894490840c008578737d5e208649d1cd34beb403c2226300297853a29cf6c661b426c13306575d81f6fd21712e0ec4366013883b95a71d5094acbf156e42de11cb873744983ec1ff9cfbee2278053b8b4e523388bd41dfd3c2ecaacc5d9d2958bbfa94f4bd0ac1c61c98ab295dd5c69020f1329818df9a2aa88ced03f4e6a4d1f8cb020afcd2384e65511ddeb908ba0c13a03dd32e8d4ccf0246008f35ef5184f81b8fed73b4aae4998bd8c7d784210042247d39396ba881bf43555d0ec58deede7b4729e79d31b2a346527594ca3a47a1723a792a701dc18d0124365e2c4a4fefed48c29a9f2fc747b302eaf92a100b2da211c91de4ab79d4aede483d852635c6f14d38095a5739d475c7aa67fdd54767a056eeb3098dfd8d1c21f32e76f0247f04118448273586856e641b83f540a643e72dc15804b78bac475f39e23291798aa45a2c10aa5fef2d5e4d7b8f529a66535d11c6149e9797f2fcce2804f2a5370345e98b0c02c7dd27135d414fe72f0740423920d68b64f6b8c05788c6692ceb4831b5d4593a970dc3ee2528765fb739964f4fed7200d7e796a9f3d0d60834e638dd8c29d4e85011e4ba4f127fe765954a5b5bb5d1cc69f2376599d5a3e8c30714893f763c06061072c10cb0eee17eb2a2514acc584b04e169d4a33a330367bb725ff9462f5d50282a2e393293eec8ea1eaab8297cc108798a4a57eccdb00647ab9f07318993f7c59c395a93cbd681d0a967a56e3f13c832c48dcc0d0096870b0d51b754e70b12a849b6f376923f7f7d909f64d64e1d6e338d39166b725265b96ed21e36b12057288d66e5df04b7b734ed0957d47fde172be2473b9ac6fdb823abe3e11ec69a170a14511d5572d6c0d9f6b749acad7003f0567bb6f9381649e42d02764077330d5af3d93185968a9f8dfed16c4a7c768a2bb98304946a557182c0ce93e82b340074e384cc6bd6129483386c654a6ab3bb12fe8e86adafa93f218fdf5019c09292858ae38ef7aa6a78e3f846215856d630ae9c5fc4009693b2767ea55c469f9099693287b35d43ee0f7a5baf3328d37b2c536f2abd6e21e472c105ae982cdd26a5a20562122e71efb1486c28d9409c3114b608f297695958c5604cf0918c0c70c56c79170260d73bde297e47cae1c404cca0a96eed51a2dc8f6f6ad862fe767ee5b5e68f231096825d935b809b3c1b5d9a2cd76cae22652bed7d263b42612ed717eba0aaf2a3989c4520c402d294285497a42736454ccb62fb3fdd073b91d4e2f6895fba9639ee78bd8ccb5bc3ce442fbeb9a1521314b82804293159fd7df4db66b78a06fe93e705bbc4e0d294a787c3cbf271b2acd15e7b4998c822f7724d3191e2265bd0d694dfb08063c9ff26a424884b46e26b5560d756c114ad1a7b92eee3f49dc2883b604ecc49c5ce92ce467778301326588a6577d44758e8d90710248d110dbf3d3d568779bd1c616369f84619dd089e38b51634f7c5d2ac9f1547a342877815a3864ad70b68b196bde9d810512f411d5235633ef65088788dfa3f152df7cee3a0803f6ac7ae192301dec07ff870ff3d7cf1c09cc9093263b225d01222376531007af9e6fb96e5ccaa8274f70adc786db7f33a20a752717b56b9a03bfce15a1aacd78c4adf8bdf41de8aaf421684c27526088c54322b5eea9175ef9c574c1f873218cc6f5df233892d7d5b0b0649ffc5a1c4909f2967a8c1f15b419ecde0448f071fa71e553f4f12cfa5e35022e75ddc5509edddc3de82d9097759b27f7c24776702e0ff64559281f796f11c1a9c77a156f390d2d18d1759b6be0347eb5bb4df912e9cfafa0db3be3243bacb378ca0946cece695a8099d6d7a24fc8bcca4c09695e3208f17f00bf404f6eb7852dfe73c163a19fd4e890e0edd5c7a727984b6f47a952373b95200bba061756c699c218b52c265b22bcd5cb24fdf056621fdd2126cede171e435320ca34e56e4c82a2afc9a59d3bf4647877658b6f23a6484f37acd8e2e184926993b5d1bbe6cdba64f486b4fb41bb94a644140540894f8fc14e585bc8beae88eabf926add289c82eb8cea99743baed842d76eb5c5573f7a7f3f2693960d6bfed697b5619afd942f41689dbd281a35e32478ba3a388dada82a2f4164481aa6a8f3946a84ea6186b20ce388c202be42996ae90feec7258d4a4a276353df84c96b160ac003d81cf395c0e61b0f0a9e692c32fab307f754cae5de7716a00cb96160cd39c931f4885d612862cecf6ba76502c9d266f97e4cf6cf0a16f787788e5471458a0dc24d3f2a28caa0f7ee00cf8bb113bd9c2b086037d765b5ec9a849df6f482fc01b48261e44299b0bc88321d837b6e2d221ebf2996b4140cd82e531de27f8de445f31c64469a5a145b031cd2569d19e27369c31ec63a989f0c9aaba7cc9d36d652001d40004f83a90d6465854f31bf15d1ef6bff4c02d60b948a37e3f50d250d7f85f545f507014aae5a35908283168c034f654acbb9d0fc261671d612e3d74261653e69e5e9cf7c8fda298b4d6c879cbbb97eafe648ba70150599089d65c1fdc0d5af879a2d46a443ac6dd21b33f72510742db4faf7eeb1580580ffe26e2d5ff", 0x1000}, 0x1006) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_capability(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='security.capability\x00', &(0x7f0000000340)=@v2={0x2000000, [{0x4, 0x6}, {0x0, 0x4}]}, 0x14, 0x1) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, &(0x7f0000000180)='trusted.overlay.redirect\x00', &(0x7f0000000300)='./file1\x00', 0x8, 0x2) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f0000003740)={0x0, @multicast1, @dev}, &(0x7f0000003780)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000003dc0)={{{@in6=@remote, @in6=@mcast1}}, {{@in=@rand_addr}, 0x0, @in=@multicast2}}, &(0x7f0000003ec0)=0xe8) clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) 03:55:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r3, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x2ff]}) 03:55:29 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f00005befdc)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000300)=0x3) ioctl$TIOCSLCKTRMIOS(r1, 0x80047456, &(0x7f0000000000)) 03:55:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:29 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:29 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:30 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:30 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:30 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) socketpair$unix(0x1, 0x40000000000002, 0x0, &(0x7f0000000140)) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r0, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:30 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:30 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:30 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:31 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:31 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:31 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000140)={0x79, 0x0, [0x40000106]}) 03:55:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x0, 0x0, [0x40000106]}) 03:55:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x0, 0x0, [0x40000106]}) 03:55:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x0, 0x0, [0x40000106]}) 03:55:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79}) 03:55:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79}) 03:55:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:32 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0xc008ae88, &(0x7f0000000140)={0x79}) 03:55:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) r3 = getpid() sched_getaffinity(r3, 0x8, &(0x7f0000000300)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) r3 = getpid() sched_getaffinity(r3, 0x8, &(0x7f0000000300)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) r3 = getpid() sched_getaffinity(r3, 0x8, &(0x7f0000000300)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) r3 = getpid() sched_getaffinity(r3, 0x8, &(0x7f0000000300)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) getpid() ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:33 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:33 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:55:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:55:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$DRM_IOCTL_VERSION(r1, 0xc0406400, &(0x7f0000000180)={0xdc, 0x4, 0x400, 0x81, &(0x7f0000000240)=""/129, 0x21, &(0x7f0000000000)=""/33, 0x1a, &(0x7f0000000100)=""/26}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:55:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:34 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:34 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:55:35 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:55:35 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:55:35 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:35 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:35 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:35 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x8100]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:35 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:35 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:36 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:36 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x0, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f000000a000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="dadab9680900000f3267660f3841362943b9800000c00f3235000400000f300f38f086f4ffff7fb891b900000f23d00f21f8352000000a0f23f8ea7a33db4c7400b805000000b9a80000000f01c166baa10066ed308b00000000"}], 0xcc, 0x20, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:55:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3e, 0x107041) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000280)={0x9, 0x3}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffff9c, 0x2401, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000500)={0x1ff, 0xd2, 0x101, 0x100, 0xff, 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000000c0)=0x800001d) 03:55:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3e, 0x107041) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000280)={0x9, 0x3}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffff9c, 0x2401, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000500)={0x1ff, 0xd2, 0x101, 0x100, 0xff, 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000000c0)=0x800001d) 03:55:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3e, 0x107041) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000280)={0x9, 0x3}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffff9c, 0x2401, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000500)={0x1ff, 0xd2, 0x101, 0x100, 0xff, 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f00000000c0)=0x800001d) 03:55:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3e, 0x107041) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000280)={0x9, 0x3}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffff9c, 0x2401, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000500)={0x1ff, 0xd2, 0x101, 0x100, 0xff, 0x6}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:55:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3e, 0x107041) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000280)={0x9, 0x3}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffff9c, 0x2401, 0x7) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x4058534c, &(0x7f0000000500)={0x1ff, 0xd2, 0x101, 0x100, 0xff, 0x6}) 03:55:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x1f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3e, 0x107041) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000280)={0x9, 0x3}) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffff9c, 0x2401, 0x7) 03:55:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3e, 0x107041) ioctl$KVM_TPR_ACCESS_REPORTING(r4, 0xc028ae92, &(0x7f0000000280)={0x9, 0x3}) 03:55:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) syz_open_dev$vcsn(&(0x7f00000002c0)='/dev/vcs#\x00', 0x3e, 0x107041) 03:55:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:55:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:55:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:55:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:55:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:42 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x81000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) socket$l2tp(0x18, 0x1, 0x1) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:55:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:55:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:55:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:55:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="f3fff1ff0c000e000600000008000b00c70600000800050080f900000c00010072737670360000004400020020000400ff0100000008000008000000000100001f000000010000000008000320000400060000000700000003000000b900000003000000d5d900003208070108000b0003000000080005000109000008000500090000000c000100666c6f7700000000d000020008000100042500000c000a00080005000500000008000700f7ffffff08000c00f9ffffff98000b001c0002001800588c465f0100070007000900050000000500000000000800010082a00000080001004f09000008000100ff7f0000580002005400c9050000ac00000009001900223c5865c328c596a365340383c6c22f6f68f1cd0e4d694fb2d99adafcaa201229f606a7659589d6345aff76578b551b00efc1c60a2ad69d35f99044d6b92a19d3f800000000080001000700000008000300ffff0f00080007000300000008000500040700000800010066770000180002001400030062637368300000000000000000000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:55:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="f3fff1ff0c000e000600000008000b00c70600000800050080f900000c00010072737670360000004400020020000400ff0100000008000008000000000100001f000000010000000008000320000400060000000700000003000000b900000003000000d5d900003208070108000b0003000000080005000109000008000500090000000c000100666c6f7700000000d000020008000100042500000c000a00080005000500000008000700f7ffffff08000c00f9ffffff98000b001c0002001800588c465f0100070007000900050000000500000000000800010082a00000080001004f09000008000100ff7f0000580002005400c9050000ac00000009001900223c5865c328c596a365340383c6c22f6f68f1cd0e4d694fb2d99adafcaa201229f606a7659589d6345aff76578b551b00efc1c60a2ad69d35f99044d6b92a19d3f800000000080001000700000008000300ffff0f00080007000300000008000500040700000800010066770000180002001400030062637368300000000000000000000000"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2, 0x0}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="030000002d0000082cbd7916fedbdf2500000000", @ANYRES32=r2, @ANYBLOB="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"], 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000300)={@mcast2}, &(0x7f0000000140)=0x14) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:55:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000000)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:45 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:45 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:45 executing program 2: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:46 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r1, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r0, r1, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 03:55:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x81000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x15, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:55:48 executing program 2: 03:55:48 executing program 2: 03:55:48 executing program 2: 03:55:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:49 executing program 2: 03:55:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0xffffffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:49 executing program 2: 03:55:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:49 executing program 2: 03:55:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff87c01420) 03:55:49 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:50 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:50 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 03:55:50 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="c744240082c06997c74424020974fe15c7442406000000000f01142448b800000000000000000f23c00f21f835010002000f23f80f08420ff5fac744240000200000c74424029e4c0000c7442406000000000f011424470f08c744240092a00000c744240207000000c7442406000000000f011c2466ba410066b8010066ef2e4e0fc7a800b0ffffc7442400c6000000c74424020a000000ff1c24", 0x9b}], 0x1, 0x50, &(0x7f0000000180), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 03:55:50 executing program 2 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1779.404053] FAULT_INJECTION: forcing a failure. [ 1779.404053] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.416254] CPU: 0 PID: 16869 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1779.423548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1779.432909] Call Trace: [ 1779.435531] dump_stack+0x1c4/0x2b6 [ 1779.439162] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1779.444382] ? __lock_acquire+0x7ec/0x4ec0 [ 1779.448641] should_fail.cold.4+0xa/0x17 [ 1779.452709] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1779.457842] ? mark_held_locks+0x130/0x130 [ 1779.462092] ? print_usage_bug+0xc0/0xc0 [ 1779.466150] ? graph_lock+0x170/0x170 [ 1779.469947] ? print_usage_bug+0xc0/0xc0 [ 1779.474003] ? print_usage_bug+0xc0/0xc0 [ 1779.478064] ? graph_lock+0x170/0x170 [ 1779.481865] ? print_usage_bug+0xc0/0xc0 [ 1779.485944] ? find_held_lock+0x36/0x1c0 [ 1779.490027] ? __lock_is_held+0xb5/0x140 [ 1779.494098] ? ___might_sleep+0x1ed/0x300 [ 1779.498246] ? arch_local_save_flags+0x40/0x40 [ 1779.502847] __should_failslab+0x124/0x180 [ 1779.507075] should_failslab+0x9/0x14 [ 1779.510873] kmem_cache_alloc+0x2be/0x730 [ 1779.515083] ? vmx_flush_tlb_gva+0x380/0x380 [ 1779.519525] ? ima_get_action+0x7e/0xa0 [ 1779.523534] mmu_topup_memory_caches+0xf7/0x390 [ 1779.528260] kvm_mmu_load+0x21/0xfa0 [ 1779.532016] vcpu_enter_guest+0x3dbe/0x6380 [ 1779.536350] ? emulator_read_emulated+0x50/0x50 [ 1779.541038] ? vmx_vcpu_load+0xb06/0x1030 [ 1779.545199] ? vmx_write_tsc_offset+0x680/0x680 [ 1779.549855] ? graph_lock+0x170/0x170 [ 1779.553650] ? lock_downgrade+0x900/0x900 [ 1779.557810] ? check_preemption_disabled+0x48/0x280 [ 1779.562830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1779.568364] ? check_preemption_disabled+0x48/0x280 [ 1779.573397] ? check_preemption_disabled+0x48/0x280 [ 1779.578421] ? __lock_is_held+0xb5/0x140 [ 1779.582479] ? lock_acquire+0x1ed/0x520 [ 1779.586468] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1779.591490] ? lock_release+0x970/0x970 [ 1779.595462] ? kvm_gen_update_masterclock+0x350/0x350 [ 1779.600655] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1779.605147] ? preempt_notifier_dec+0x20/0x20 [ 1779.609636] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1779.614476] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1779.619548] kvm_vcpu_ioctl+0x72b/0x1150 [ 1779.623608] ? kvm_vcpu_block+0x1030/0x1030 [ 1779.627946] ? find_held_lock+0x36/0x1c0 [ 1779.632019] ? __fget+0x4aa/0x740 [ 1779.635468] ? check_preemption_disabled+0x48/0x280 [ 1779.640488] ? kasan_check_read+0x11/0x20 [ 1779.644636] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1779.649929] ? rcu_bh_qs+0xc0/0xc0 [ 1779.653475] ? __fget+0x4d1/0x740 [ 1779.656929] ? ksys_dup3+0x680/0x680 [ 1779.660631] ? find_held_lock+0x36/0x1c0 [ 1779.664689] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1779.669616] ? kvm_vcpu_block+0x1030/0x1030 [ 1779.673936] do_vfs_ioctl+0x1de/0x1720 [ 1779.677823] ? __lock_is_held+0xb5/0x140 [ 1779.681892] ? ioctl_preallocate+0x300/0x300 [ 1779.686326] ? __fget_light+0x2e9/0x430 [ 1779.690292] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1779.695895] ? smack_file_ioctl+0x210/0x3c0 [ 1779.700224] ? fget_raw+0x20/0x20 [ 1779.703692] ? smack_file_lock+0x2e0/0x2e0 [ 1779.707959] ? __sb_end_write+0xd9/0x110 [ 1779.712023] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1779.717556] ? fput+0x130/0x1a0 [ 1779.720847] ? do_syscall_64+0x9a/0x820 [ 1779.724822] ? do_syscall_64+0x9a/0x820 [ 1779.728933] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1779.734523] ? security_file_ioctl+0x94/0xc0 [ 1779.738964] ksys_ioctl+0xa9/0xd0 [ 1779.742426] __x64_sys_ioctl+0x73/0xb0 [ 1779.746320] do_syscall_64+0x1b9/0x820 [ 1779.750230] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1779.755598] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1779.760517] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1779.765349] ? trace_hardirqs_on_caller+0x310/0x310 [ 1779.770353] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1779.775377] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1779.780415] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1779.785274] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1779.790463] RIP: 0033:0x457569 [ 1779.793658] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1779.812556] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1779.820269] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1779.827541] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1779.834801] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1779.842065] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 03:55:50 executing program 2 (fault-call:5 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1779.849339] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1779.927734] FAULT_INJECTION: forcing a failure. [ 1779.927734] name failslab, interval 1, probability 0, space 0, times 0 [ 1779.939221] CPU: 0 PID: 16873 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1779.946497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1779.955858] Call Trace: [ 1779.958463] dump_stack+0x1c4/0x2b6 [ 1779.962094] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1779.967297] ? __kernel_text_address+0xd/0x40 [ 1779.971808] ? unwind_get_return_address+0x61/0xa0 [ 1779.976771] should_fail.cold.4+0xa/0x17 [ 1779.980841] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1779.985948] ? save_stack+0xa9/0xd0 [ 1779.989574] ? graph_lock+0x170/0x170 [ 1779.993386] ? kasan_slab_alloc+0x12/0x20 [ 1779.997543] ? kmem_cache_alloc+0x12e/0x730 [ 1780.001879] ? mmu_topup_memory_caches+0xf7/0x390 [ 1780.006730] ? kvm_mmu_load+0x21/0xfa0 [ 1780.010619] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1780.015138] ? graph_lock+0x170/0x170 [ 1780.018954] ? ksys_ioctl+0xa9/0xd0 [ 1780.022591] ? __x64_sys_ioctl+0x73/0xb0 [ 1780.026664] ? do_syscall_64+0x1b9/0x820 [ 1780.030738] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1780.036122] ? find_held_lock+0x36/0x1c0 [ 1780.040385] ? __lock_is_held+0xb5/0x140 [ 1780.044456] ? ___might_sleep+0x1ed/0x300 [ 1780.048612] ? arch_local_save_flags+0x40/0x40 [ 1780.053212] __should_failslab+0x124/0x180 [ 1780.057439] should_failslab+0x9/0x14 [ 1780.061229] kmem_cache_alloc+0x2be/0x730 [ 1780.065377] ? vmx_flush_tlb_gva+0x380/0x380 [ 1780.069785] ? ima_get_action+0x7e/0xa0 [ 1780.073749] ? mmu_topup_memory_caches+0xf7/0x390 [ 1780.078603] mmu_topup_memory_caches+0xf7/0x390 [ 1780.083298] kvm_mmu_load+0x21/0xfa0 [ 1780.087012] vcpu_enter_guest+0x3dbe/0x6380 [ 1780.091330] ? emulator_read_emulated+0x50/0x50 [ 1780.095993] ? vmx_vcpu_load+0xb06/0x1030 [ 1780.100238] ? vmx_write_tsc_offset+0x680/0x680 [ 1780.104903] ? graph_lock+0x170/0x170 [ 1780.108700] ? lock_downgrade+0x900/0x900 [ 1780.112837] ? check_preemption_disabled+0x48/0x280 [ 1780.117845] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1780.123375] ? check_preemption_disabled+0x48/0x280 [ 1780.128378] ? check_preemption_disabled+0x48/0x280 [ 1780.133404] ? __lock_is_held+0xb5/0x140 [ 1780.137486] ? lock_acquire+0x1ed/0x520 [ 1780.141459] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1780.146480] ? lock_release+0x970/0x970 [ 1780.150449] ? kvm_gen_update_masterclock+0x350/0x350 [ 1780.155640] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1780.160122] ? preempt_notifier_dec+0x20/0x20 [ 1780.164614] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1780.169462] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1780.174491] kvm_vcpu_ioctl+0x72b/0x1150 [ 1780.178557] ? kvm_vcpu_block+0x1030/0x1030 [ 1780.182874] ? find_held_lock+0x36/0x1c0 [ 1780.186935] ? __fget+0x4aa/0x740 [ 1780.190381] ? check_preemption_disabled+0x48/0x280 [ 1780.195413] ? kasan_check_read+0x11/0x20 [ 1780.199569] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1780.204849] ? rcu_bh_qs+0xc0/0xc0 [ 1780.208396] ? __fget+0x4d1/0x740 [ 1780.211846] ? ksys_dup3+0x680/0x680 [ 1780.215548] ? find_held_lock+0x36/0x1c0 [ 1780.219608] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1780.224533] ? kvm_vcpu_block+0x1030/0x1030 [ 1780.228843] do_vfs_ioctl+0x1de/0x1720 [ 1780.232736] ? __lock_is_held+0xb5/0x140 [ 1780.236794] ? ioctl_preallocate+0x300/0x300 [ 1780.241198] ? __fget_light+0x2e9/0x430 [ 1780.245161] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1780.250694] ? smack_file_ioctl+0x210/0x3c0 [ 1780.255017] ? fget_raw+0x20/0x20 [ 1780.258464] ? smack_file_lock+0x2e0/0x2e0 [ 1780.262687] ? __sb_end_write+0xd9/0x110 [ 1780.266751] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1780.272304] ? fput+0x130/0x1a0 [ 1780.275576] ? do_syscall_64+0x9a/0x820 [ 1780.279549] ? do_syscall_64+0x9a/0x820 [ 1780.283547] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1780.289087] ? security_file_ioctl+0x94/0xc0 [ 1780.293494] ksys_ioctl+0xa9/0xd0 [ 1780.296949] __x64_sys_ioctl+0x73/0xb0 [ 1780.300828] do_syscall_64+0x1b9/0x820 [ 1780.304705] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1780.310062] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1780.314992] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1780.319826] ? trace_hardirqs_on_caller+0x310/0x310 [ 1780.324846] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1780.329885] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1780.334903] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1780.339750] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1780.344938] RIP: 0033:0x457569 [ 1780.348153] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1780.367040] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x1f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1780.374734] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1780.381998] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1780.389254] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1780.396518] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1780.403805] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:55:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:51 executing program 2 (fault-call:5 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1780.580399] FAULT_INJECTION: forcing a failure. [ 1780.580399] name failslab, interval 1, probability 0, space 0, times 0 [ 1780.592649] CPU: 0 PID: 16898 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1780.599942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1780.609287] Call Trace: [ 1780.611884] dump_stack+0x1c4/0x2b6 [ 1780.615524] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1780.620713] ? __kernel_text_address+0xd/0x40 [ 1780.625223] ? unwind_get_return_address+0x61/0xa0 [ 1780.630205] should_fail.cold.4+0xa/0x17 [ 1780.634270] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1780.639396] ? save_stack+0xa9/0xd0 [ 1780.643030] ? graph_lock+0x170/0x170 [ 1780.646839] ? kasan_slab_alloc+0x12/0x20 [ 1780.651012] ? kmem_cache_alloc+0x12e/0x730 [ 1780.655338] ? mmu_topup_memory_caches+0xf7/0x390 [ 1780.660175] ? kvm_mmu_load+0x21/0xfa0 [ 1780.664064] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1780.668636] ? graph_lock+0x170/0x170 [ 1780.672443] ? ksys_ioctl+0xa9/0xd0 [ 1780.676077] ? __x64_sys_ioctl+0x73/0xb0 [ 1780.680130] ? do_syscall_64+0x1b9/0x820 [ 1780.684280] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1780.689666] ? find_held_lock+0x36/0x1c0 [ 1780.693761] ? __lock_is_held+0xb5/0x140 [ 1780.697835] ? ___might_sleep+0x1ed/0x300 [ 1780.701985] ? arch_local_save_flags+0x40/0x40 [ 1780.706672] __should_failslab+0x124/0x180 [ 1780.710900] should_failslab+0x9/0x14 [ 1780.714717] kmem_cache_alloc+0x2be/0x730 [ 1780.718857] ? vmx_flush_tlb_gva+0x380/0x380 [ 1780.723269] ? ima_get_action+0x7e/0xa0 [ 1780.727232] ? mmu_topup_memory_caches+0xf7/0x390 [ 1780.732088] mmu_topup_memory_caches+0xf7/0x390 [ 1780.736761] kvm_mmu_load+0x21/0xfa0 [ 1780.740491] vcpu_enter_guest+0x3dbe/0x6380 [ 1780.744823] ? emulator_read_emulated+0x50/0x50 [ 1780.749492] ? vmx_vcpu_load+0xb06/0x1030 [ 1780.753647] ? vmx_write_tsc_offset+0x680/0x680 [ 1780.758303] ? graph_lock+0x170/0x170 [ 1780.762101] ? lock_downgrade+0x900/0x900 [ 1780.766249] ? check_preemption_disabled+0x48/0x280 [ 1780.771258] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1780.776801] ? check_preemption_disabled+0x48/0x280 [ 1780.781822] ? check_preemption_disabled+0x48/0x280 [ 1780.786877] ? __lock_is_held+0xb5/0x140 [ 1780.790947] ? lock_acquire+0x1ed/0x520 [ 1780.794910] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1780.799940] ? lock_release+0x970/0x970 [ 1780.803904] ? kvm_gen_update_masterclock+0x350/0x350 [ 1780.809103] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1780.813613] ? preempt_notifier_dec+0x20/0x20 [ 1780.818153] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1780.823005] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1780.828018] kvm_vcpu_ioctl+0x72b/0x1150 [ 1780.832072] ? kvm_vcpu_block+0x1030/0x1030 [ 1780.836399] ? find_held_lock+0x36/0x1c0 [ 1780.840478] ? __fget+0x4aa/0x740 [ 1780.843932] ? check_preemption_disabled+0x48/0x280 [ 1780.848964] ? kasan_check_read+0x11/0x20 [ 1780.853118] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1780.858394] ? rcu_bh_qs+0xc0/0xc0 [ 1780.861971] ? __fget+0x4d1/0x740 [ 1780.865446] ? ksys_dup3+0x680/0x680 [ 1780.869181] ? find_held_lock+0x36/0x1c0 [ 1780.873269] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1780.878225] ? kvm_vcpu_block+0x1030/0x1030 [ 1780.882547] do_vfs_ioctl+0x1de/0x1720 [ 1780.886436] ? __lock_is_held+0xb5/0x140 [ 1780.890510] ? ioctl_preallocate+0x300/0x300 [ 1780.894932] ? __fget_light+0x2e9/0x430 [ 1780.898930] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1780.904497] ? smack_file_ioctl+0x210/0x3c0 [ 1780.908804] ? fget_raw+0x20/0x20 [ 1780.912250] ? smack_file_lock+0x2e0/0x2e0 [ 1780.916479] ? __sb_end_write+0xd9/0x110 [ 1780.920544] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1780.926093] ? fput+0x130/0x1a0 [ 1780.929390] ? do_syscall_64+0x9a/0x820 [ 1780.933369] ? do_syscall_64+0x9a/0x820 [ 1780.937338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1780.942873] ? security_file_ioctl+0x94/0xc0 [ 1780.947333] ksys_ioctl+0xa9/0xd0 [ 1780.950801] __x64_sys_ioctl+0x73/0xb0 [ 1780.954690] do_syscall_64+0x1b9/0x820 [ 1780.958594] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1780.963972] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1780.968927] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1780.973858] ? trace_hardirqs_on_caller+0x310/0x310 [ 1780.978887] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1780.983925] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1780.988956] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1780.993928] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1780.999113] RIP: 0033:0x457569 [ 1781.002321] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1781.021221] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1781.028925] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1781.036183] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1781.043470] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1781.050740] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1781.058002] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:55:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:53 executing program 2 (fault-call:5 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1782.241151] FAULT_INJECTION: forcing a failure. [ 1782.241151] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.252584] CPU: 1 PID: 16931 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1782.259854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1782.269198] Call Trace: [ 1782.271793] dump_stack+0x1c4/0x2b6 [ 1782.275442] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1782.280637] ? __kernel_text_address+0xd/0x40 [ 1782.285125] ? unwind_get_return_address+0x61/0xa0 [ 1782.290047] should_fail.cold.4+0xa/0x17 [ 1782.294100] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1782.299203] ? save_stack+0xa9/0xd0 [ 1782.302835] ? graph_lock+0x170/0x170 [ 1782.306620] ? kasan_slab_alloc+0x12/0x20 [ 1782.310757] ? kmem_cache_alloc+0x12e/0x730 [ 1782.315080] ? mmu_topup_memory_caches+0xf7/0x390 [ 1782.319929] ? kvm_mmu_load+0x21/0xfa0 [ 1782.323819] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1782.328316] ? graph_lock+0x170/0x170 [ 1782.332113] ? ksys_ioctl+0xa9/0xd0 [ 1782.335729] ? __x64_sys_ioctl+0x73/0xb0 [ 1782.339781] ? do_syscall_64+0x1b9/0x820 [ 1782.343831] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1782.349188] ? find_held_lock+0x36/0x1c0 [ 1782.353264] ? __lock_is_held+0xb5/0x140 [ 1782.357321] ? ___might_sleep+0x1ed/0x300 [ 1782.361470] ? arch_local_save_flags+0x40/0x40 [ 1782.366082] __should_failslab+0x124/0x180 [ 1782.370327] should_failslab+0x9/0x14 [ 1782.374131] kmem_cache_alloc+0x2be/0x730 [ 1782.378281] ? vmx_flush_tlb_gva+0x380/0x380 [ 1782.382680] ? ima_get_action+0x7e/0xa0 [ 1782.386662] ? mmu_topup_memory_caches+0xf7/0x390 [ 1782.391526] mmu_topup_memory_caches+0xf7/0x390 [ 1782.396189] kvm_mmu_load+0x21/0xfa0 [ 1782.399898] vcpu_enter_guest+0x3dbe/0x6380 [ 1782.404246] ? emulator_read_emulated+0x50/0x50 [ 1782.408995] ? vmx_vcpu_load+0xb06/0x1030 [ 1782.413154] ? vmx_write_tsc_offset+0x680/0x680 [ 1782.417835] ? graph_lock+0x170/0x170 [ 1782.421627] ? lock_downgrade+0x900/0x900 [ 1782.425780] ? check_preemption_disabled+0x48/0x280 [ 1782.431062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1782.436606] ? check_preemption_disabled+0x48/0x280 [ 1782.441621] ? check_preemption_disabled+0x48/0x280 [ 1782.446646] ? __lock_is_held+0xb5/0x140 [ 1782.450722] ? lock_acquire+0x1ed/0x520 [ 1782.454705] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1782.459735] ? lock_release+0x970/0x970 [ 1782.463720] ? kvm_gen_update_masterclock+0x350/0x350 [ 1782.468926] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1782.473432] ? preempt_notifier_dec+0x20/0x20 [ 1782.477958] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1782.482799] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1782.487842] kvm_vcpu_ioctl+0x72b/0x1150 [ 1782.491911] ? kvm_vcpu_block+0x1030/0x1030 [ 1782.496246] ? find_held_lock+0x36/0x1c0 [ 1782.500308] ? __fget+0x4aa/0x740 [ 1782.503750] ? check_preemption_disabled+0x48/0x280 [ 1782.508758] ? kasan_check_read+0x11/0x20 [ 1782.512905] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1782.518199] ? rcu_bh_qs+0xc0/0xc0 [ 1782.521733] ? __fget+0x4d1/0x740 [ 1782.525186] ? ksys_dup3+0x680/0x680 [ 1782.528926] ? find_held_lock+0x36/0x1c0 [ 1782.533006] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1782.537951] ? kvm_vcpu_block+0x1030/0x1030 [ 1782.542262] do_vfs_ioctl+0x1de/0x1720 [ 1782.546139] ? __lock_is_held+0xb5/0x140 [ 1782.550194] ? ioctl_preallocate+0x300/0x300 [ 1782.554607] ? __fget_light+0x2e9/0x430 [ 1782.558583] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1782.564111] ? smack_file_ioctl+0x210/0x3c0 [ 1782.568417] ? fget_raw+0x20/0x20 [ 1782.571866] ? smack_file_lock+0x2e0/0x2e0 [ 1782.576101] ? __sb_end_write+0xd9/0x110 [ 1782.580168] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1782.585699] ? fput+0x130/0x1a0 [ 1782.588985] ? do_syscall_64+0x9a/0x820 [ 1782.592950] ? do_syscall_64+0x9a/0x820 [ 1782.596939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1782.602469] ? security_file_ioctl+0x94/0xc0 [ 1782.606870] ksys_ioctl+0xa9/0xd0 [ 1782.610312] __x64_sys_ioctl+0x73/0xb0 [ 1782.614191] do_syscall_64+0x1b9/0x820 [ 1782.618070] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1782.623434] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1782.628385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1782.633218] ? trace_hardirqs_on_caller+0x310/0x310 [ 1782.638224] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1782.643229] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1782.648251] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1782.653118] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1782.658312] RIP: 0033:0x457569 [ 1782.661499] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1782.680398] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:53 executing program 2 (fault-call:5 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1782.688095] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1782.695374] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1782.702644] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1782.709906] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1782.717186] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1782.788604] FAULT_INJECTION: forcing a failure. [ 1782.788604] name failslab, interval 1, probability 0, space 0, times 0 [ 1782.800251] CPU: 1 PID: 16952 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1782.807542] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1782.816882] Call Trace: [ 1782.819461] dump_stack+0x1c4/0x2b6 [ 1782.823085] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1782.828264] ? __kernel_text_address+0xd/0x40 [ 1782.832748] ? unwind_get_return_address+0x61/0xa0 [ 1782.837673] should_fail.cold.4+0xa/0x17 [ 1782.841752] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1782.846865] ? save_stack+0xa9/0xd0 [ 1782.850493] ? graph_lock+0x170/0x170 [ 1782.854292] ? kasan_slab_alloc+0x12/0x20 [ 1782.858427] ? kmem_cache_alloc+0x12e/0x730 [ 1782.862747] ? mmu_topup_memory_caches+0xf7/0x390 [ 1782.867593] ? kvm_mmu_load+0x21/0xfa0 [ 1782.871479] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1782.875987] ? graph_lock+0x170/0x170 [ 1782.879788] ? ksys_ioctl+0xa9/0xd0 [ 1782.883412] ? __x64_sys_ioctl+0x73/0xb0 [ 1782.887468] ? do_syscall_64+0x1b9/0x820 [ 1782.891520] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1782.896893] ? find_held_lock+0x36/0x1c0 [ 1782.900977] ? __lock_is_held+0xb5/0x140 [ 1782.905047] ? ___might_sleep+0x1ed/0x300 [ 1782.909188] ? arch_local_save_flags+0x40/0x40 [ 1782.913793] __should_failslab+0x124/0x180 [ 1782.918048] should_failslab+0x9/0x14 [ 1782.921853] kmem_cache_alloc+0x2be/0x730 [ 1782.925993] ? vmx_flush_tlb_gva+0x380/0x380 [ 1782.930402] ? ima_get_action+0x7e/0xa0 [ 1782.934380] ? mmu_topup_memory_caches+0xf7/0x390 [ 1782.939226] mmu_topup_memory_caches+0xf7/0x390 [ 1782.943931] kvm_mmu_load+0x21/0xfa0 [ 1782.947653] vcpu_enter_guest+0x3dbe/0x6380 [ 1782.951969] ? emulator_read_emulated+0x50/0x50 [ 1782.956632] ? vmx_vcpu_load+0xb06/0x1030 [ 1782.960786] ? vmx_write_tsc_offset+0x680/0x680 [ 1782.965467] ? graph_lock+0x170/0x170 [ 1782.969255] ? lock_downgrade+0x900/0x900 [ 1782.973394] ? check_preemption_disabled+0x48/0x280 [ 1782.978401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1782.983948] ? check_preemption_disabled+0x48/0x280 [ 1782.988974] ? check_preemption_disabled+0x48/0x280 [ 1782.994034] ? __lock_is_held+0xb5/0x140 [ 1782.998095] ? lock_acquire+0x1ed/0x520 [ 1783.002059] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1783.007081] ? lock_release+0x970/0x970 [ 1783.011059] ? kvm_gen_update_masterclock+0x350/0x350 [ 1783.016249] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1783.020757] ? preempt_notifier_dec+0x20/0x20 [ 1783.025281] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1783.030122] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1783.035142] kvm_vcpu_ioctl+0x72b/0x1150 [ 1783.039203] ? kvm_vcpu_block+0x1030/0x1030 [ 1783.043520] ? find_held_lock+0x36/0x1c0 [ 1783.047593] ? __fget+0x4aa/0x740 [ 1783.051038] ? check_preemption_disabled+0x48/0x280 [ 1783.056061] ? kasan_check_read+0x11/0x20 [ 1783.060212] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1783.065494] ? rcu_bh_qs+0xc0/0xc0 [ 1783.069043] ? __fget+0x4d1/0x740 [ 1783.072522] ? ksys_dup3+0x680/0x680 [ 1783.076240] ? find_held_lock+0x36/0x1c0 [ 1783.080298] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1783.085236] ? kvm_vcpu_block+0x1030/0x1030 [ 1783.089559] do_vfs_ioctl+0x1de/0x1720 [ 1783.093450] ? __lock_is_held+0xb5/0x140 [ 1783.097523] ? ioctl_preallocate+0x300/0x300 [ 1783.101950] ? __fget_light+0x2e9/0x430 [ 1783.105939] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1783.111471] ? smack_file_ioctl+0x210/0x3c0 [ 1783.115781] ? fget_raw+0x20/0x20 [ 1783.119237] ? smack_file_lock+0x2e0/0x2e0 [ 1783.123480] ? __sb_end_write+0xd9/0x110 [ 1783.127548] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1783.133072] ? fput+0x130/0x1a0 [ 1783.136344] ? do_syscall_64+0x9a/0x820 [ 1783.140330] ? do_syscall_64+0x9a/0x820 [ 1783.144312] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1783.149839] ? security_file_ioctl+0x94/0xc0 [ 1783.154238] ksys_ioctl+0xa9/0xd0 [ 1783.157709] __x64_sys_ioctl+0x73/0xb0 [ 1783.161591] do_syscall_64+0x1b9/0x820 [ 1783.165469] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1783.170833] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1783.175764] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1783.180602] ? trace_hardirqs_on_caller+0x310/0x310 [ 1783.185609] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1783.190613] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1783.195621] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1783.200469] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1783.205681] RIP: 0033:0x457569 [ 1783.208882] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1783.227804] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1783.235511] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1783.242781] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1783.250059] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1783.257331] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1783.264593] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:55:54 executing program 2 (fault-call:5 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1783.369255] FAULT_INJECTION: forcing a failure. [ 1783.369255] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.381073] CPU: 0 PID: 16973 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1783.388372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1783.397729] Call Trace: [ 1783.400316] dump_stack+0x1c4/0x2b6 [ 1783.403956] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1783.409162] ? __kernel_text_address+0xd/0x40 [ 1783.413661] ? unwind_get_return_address+0x61/0xa0 [ 1783.418606] should_fail.cold.4+0xa/0x17 [ 1783.422671] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1783.427785] ? save_stack+0xa9/0xd0 [ 1783.431430] ? graph_lock+0x170/0x170 [ 1783.435230] ? kasan_slab_alloc+0x12/0x20 [ 1783.439377] ? kmem_cache_alloc+0x12e/0x730 [ 1783.443712] ? mmu_topup_memory_caches+0xf7/0x390 [ 1783.448562] ? kvm_mmu_load+0x21/0xfa0 [ 1783.452465] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1783.456967] ? graph_lock+0x170/0x170 [ 1783.460769] ? ksys_ioctl+0xa9/0xd0 [ 1783.464397] ? __x64_sys_ioctl+0x73/0xb0 [ 1783.468445] ? do_syscall_64+0x1b9/0x820 [ 1783.472499] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1783.477867] ? find_held_lock+0x36/0x1c0 [ 1783.481939] ? __lock_is_held+0xb5/0x140 [ 1783.486018] ? ___might_sleep+0x1ed/0x300 [ 1783.490179] ? arch_local_save_flags+0x40/0x40 [ 1783.494799] __should_failslab+0x124/0x180 [ 1783.499046] should_failslab+0x9/0x14 [ 1783.502953] kmem_cache_alloc+0x2be/0x730 [ 1783.507110] ? vmx_flush_tlb_gva+0x380/0x380 [ 1783.511536] ? ima_get_action+0x7e/0xa0 03:55:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1783.515520] ? mmu_topup_memory_caches+0xf7/0x390 [ 1783.520373] mmu_topup_memory_caches+0xf7/0x390 [ 1783.525059] kvm_mmu_load+0x21/0xfa0 [ 1783.528801] vcpu_enter_guest+0x3dbe/0x6380 [ 1783.533154] ? emulator_read_emulated+0x50/0x50 [ 1783.537855] ? vmx_vcpu_load+0xb06/0x1030 [ 1783.542020] ? vmx_write_tsc_offset+0x680/0x680 [ 1783.542062] ? graph_lock+0x170/0x170 [ 1783.550526] ? lock_downgrade+0x900/0x900 [ 1783.554692] ? check_preemption_disabled+0x48/0x280 [ 1783.559729] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1783.565379] ? check_preemption_disabled+0x48/0x280 [ 1783.565397] ? check_preemption_disabled+0x48/0x280 [ 1783.565424] ? __lock_is_held+0xb5/0x140 [ 1783.565445] ? lock_acquire+0x1ed/0x520 [ 1783.565465] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1783.588506] ? lock_release+0x970/0x970 [ 1783.588525] ? kvm_gen_update_masterclock+0x350/0x350 [ 1783.588543] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1783.588563] ? preempt_notifier_dec+0x20/0x20 [ 1783.606955] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1783.606972] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 03:55:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1783.607005] kvm_vcpu_ioctl+0x72b/0x1150 [ 1783.607027] ? kvm_vcpu_block+0x1030/0x1030 [ 1783.607054] ? find_held_lock+0x36/0x1c0 [ 1783.629348] ? __fget+0x4aa/0x740 [ 1783.632821] ? check_preemption_disabled+0x48/0x280 [ 1783.637861] ? kasan_check_read+0x11/0x20 [ 1783.642015] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1783.647289] ? rcu_bh_qs+0xc0/0xc0 [ 1783.650844] ? __fget+0x4d1/0x740 [ 1783.654312] ? ksys_dup3+0x680/0x680 [ 1783.658034] ? find_held_lock+0x36/0x1c0 [ 1783.662111] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1783.667054] ? kvm_vcpu_block+0x1030/0x1030 [ 1783.671394] do_vfs_ioctl+0x1de/0x1720 [ 1783.675291] ? __lock_is_held+0xb5/0x140 [ 1783.675312] ? ioctl_preallocate+0x300/0x300 [ 1783.675330] ? __fget_light+0x2e9/0x430 [ 1783.675348] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1783.675369] ? smack_file_ioctl+0x210/0x3c0 [ 1783.683827] ? fget_raw+0x20/0x20 [ 1783.683846] ? smack_file_lock+0x2e0/0x2e0 [ 1783.683862] ? __sb_end_write+0xd9/0x110 [ 1783.683884] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1783.683897] ? fput+0x130/0x1a0 03:55:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1783.683924] ? do_syscall_64+0x9a/0x820 [ 1783.683943] ? do_syscall_64+0x9a/0x820 [ 1783.726223] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1783.731883] ? security_file_ioctl+0x94/0xc0 [ 1783.736322] ksys_ioctl+0xa9/0xd0 [ 1783.739795] __x64_sys_ioctl+0x73/0xb0 [ 1783.743693] do_syscall_64+0x1b9/0x820 [ 1783.747600] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1783.752978] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1783.752994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1783.753014] ? trace_hardirqs_on_caller+0x310/0x310 [ 1783.762786] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1783.762805] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1783.762828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1783.762852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1783.762865] RIP: 0033:0x457569 [ 1783.762882] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1783.762891] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:54 executing program 2 (fault-call:5 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1783.762908] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1783.762929] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1783.762939] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1783.762948] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1783.762958] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1783.919480] FAULT_INJECTION: forcing a failure. [ 1783.919480] name failslab, interval 1, probability 0, space 0, times 0 [ 1783.931010] CPU: 0 PID: 17011 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1783.938309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1783.947678] Call Trace: [ 1783.950377] dump_stack+0x1c4/0x2b6 [ 1783.954021] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1783.959229] ? __kernel_text_address+0xd/0x40 [ 1783.963733] ? unwind_get_return_address+0x61/0xa0 [ 1783.968659] should_fail.cold.4+0xa/0x17 [ 1783.972714] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1783.977823] ? save_stack+0xa9/0xd0 [ 1783.981457] ? graph_lock+0x170/0x170 [ 1783.985269] ? kasan_slab_alloc+0x12/0x20 [ 1783.989413] ? kmem_cache_alloc+0x12e/0x730 [ 1783.993735] ? mmu_topup_memory_caches+0xf7/0x390 [ 1783.998589] ? kvm_mmu_load+0x21/0xfa0 [ 1784.002504] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1784.007004] ? graph_lock+0x170/0x170 [ 1784.010796] ? ksys_ioctl+0xa9/0xd0 [ 1784.014417] ? __x64_sys_ioctl+0x73/0xb0 [ 1784.018488] ? do_syscall_64+0x1b9/0x820 [ 1784.022548] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1784.027926] ? find_held_lock+0x36/0x1c0 [ 1784.031976] ? __lock_is_held+0xb5/0x140 [ 1784.036048] ? ___might_sleep+0x1ed/0x300 [ 1784.040220] ? arch_local_save_flags+0x40/0x40 [ 1784.044819] __should_failslab+0x124/0x180 [ 1784.049056] should_failslab+0x9/0x14 [ 1784.052863] kmem_cache_alloc+0x2be/0x730 [ 1784.057005] ? vmx_flush_tlb_gva+0x380/0x380 [ 1784.061430] ? ima_get_action+0x7e/0xa0 [ 1784.065408] ? mmu_topup_memory_caches+0xf7/0x390 [ 1784.070240] mmu_topup_memory_caches+0xf7/0x390 [ 1784.074911] kvm_mmu_load+0x21/0xfa0 [ 1784.078659] vcpu_enter_guest+0x3dbe/0x6380 [ 1784.083005] ? emulator_read_emulated+0x50/0x50 [ 1784.087693] ? vmx_vcpu_load+0xb06/0x1030 [ 1784.091864] ? vmx_write_tsc_offset+0x680/0x680 [ 1784.096553] ? graph_lock+0x170/0x170 [ 1784.100363] ? lock_downgrade+0x900/0x900 [ 1784.104526] ? check_preemption_disabled+0x48/0x280 [ 1784.109548] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1784.115084] ? check_preemption_disabled+0x48/0x280 [ 1784.120104] ? check_preemption_disabled+0x48/0x280 [ 1784.125127] ? __lock_is_held+0xb5/0x140 [ 1784.129199] ? lock_acquire+0x1ed/0x520 [ 1784.133163] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1784.138205] ? lock_release+0x970/0x970 [ 1784.142226] ? kvm_gen_update_masterclock+0x350/0x350 [ 1784.147419] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1784.151903] ? preempt_notifier_dec+0x20/0x20 [ 1784.156403] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1784.161238] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1784.166267] kvm_vcpu_ioctl+0x72b/0x1150 [ 1784.170343] ? kvm_vcpu_block+0x1030/0x1030 [ 1784.174660] ? find_held_lock+0x36/0x1c0 [ 1784.178731] ? __fget+0x4aa/0x740 [ 1784.182183] ? check_preemption_disabled+0x48/0x280 [ 1784.187233] ? kasan_check_read+0x11/0x20 [ 1784.191396] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1784.196673] ? rcu_bh_qs+0xc0/0xc0 [ 1784.200235] ? __fget+0x4d1/0x740 [ 1784.203709] ? ksys_dup3+0x680/0x680 [ 1784.207422] ? find_held_lock+0x36/0x1c0 [ 1784.211482] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1784.216405] ? kvm_vcpu_block+0x1030/0x1030 [ 1784.220715] do_vfs_ioctl+0x1de/0x1720 [ 1784.224603] ? __lock_is_held+0xb5/0x140 [ 1784.228669] ? ioctl_preallocate+0x300/0x300 [ 1784.233079] ? __fget_light+0x2e9/0x430 [ 1784.237068] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1784.242610] ? smack_file_ioctl+0x210/0x3c0 [ 1784.246930] ? fget_raw+0x20/0x20 [ 1784.250386] ? smack_file_lock+0x2e0/0x2e0 [ 1784.254629] ? __sb_end_write+0xd9/0x110 [ 1784.258704] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1784.264252] ? fput+0x130/0x1a0 03:55:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1784.267541] ? do_syscall_64+0x9a/0x820 [ 1784.271528] ? do_syscall_64+0x9a/0x820 [ 1784.275516] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1784.281064] ? security_file_ioctl+0x94/0xc0 [ 1784.285486] ksys_ioctl+0xa9/0xd0 [ 1784.288969] __x64_sys_ioctl+0x73/0xb0 [ 1784.292872] do_syscall_64+0x1b9/0x820 [ 1784.296769] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1784.302140] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1784.307080] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1784.311952] ? trace_hardirqs_on_caller+0x310/0x310 [ 1784.316985] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1784.322016] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1784.327054] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1784.331903] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1784.337097] RIP: 0033:0x457569 [ 1784.340303] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1784.359217] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:55 executing program 2 (fault-call:5 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1784.366953] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1784.374231] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1784.381516] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1784.388787] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1784.396051] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:55:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1784.489537] FAULT_INJECTION: forcing a failure. [ 1784.489537] name failslab, interval 1, probability 0, space 0, times 0 [ 1784.504570] CPU: 0 PID: 17027 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1784.511864] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1784.521207] Call Trace: [ 1784.523788] dump_stack+0x1c4/0x2b6 [ 1784.527422] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1784.532619] ? __kernel_text_address+0xd/0x40 [ 1784.537115] ? unwind_get_return_address+0x61/0xa0 [ 1784.542052] should_fail.cold.4+0xa/0x17 [ 1784.546104] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1784.551213] ? save_stack+0xa9/0xd0 [ 1784.554847] ? graph_lock+0x170/0x170 [ 1784.558636] ? kasan_slab_alloc+0x12/0x20 [ 1784.562782] ? kmem_cache_alloc+0x12e/0x730 [ 1784.567106] ? mmu_topup_memory_caches+0xf7/0x390 [ 1784.571960] ? kvm_mmu_load+0x21/0xfa0 [ 1784.575851] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1784.580335] ? graph_lock+0x170/0x170 [ 1784.584122] ? ksys_ioctl+0xa9/0xd0 [ 1784.587745] ? __x64_sys_ioctl+0x73/0xb0 [ 1784.591810] ? do_syscall_64+0x1b9/0x820 [ 1784.595881] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1784.601341] ? find_held_lock+0x36/0x1c0 [ 1784.605409] ? __lock_is_held+0xb5/0x140 [ 1784.609495] ? ___might_sleep+0x1ed/0x300 [ 1784.613658] ? arch_local_save_flags+0x40/0x40 [ 1784.618267] __should_failslab+0x124/0x180 [ 1784.622517] should_failslab+0x9/0x14 [ 1784.626327] kmem_cache_alloc+0x2be/0x730 [ 1784.630488] ? vmx_flush_tlb_gva+0x380/0x380 [ 1784.634909] ? ima_get_action+0x7e/0xa0 [ 1784.638907] ? mmu_topup_memory_caches+0xf7/0x390 [ 1784.643769] mmu_topup_memory_caches+0xf7/0x390 [ 1784.643791] kvm_mmu_load+0x21/0xfa0 [ 1784.643820] vcpu_enter_guest+0x3dbe/0x6380 [ 1784.643849] ? emulator_read_emulated+0x50/0x50 [ 1784.643870] ? vmx_vcpu_load+0xb06/0x1030 [ 1784.665366] ? vmx_write_tsc_offset+0x680/0x680 [ 1784.670048] ? graph_lock+0x170/0x170 [ 1784.673860] ? lock_downgrade+0x900/0x900 [ 1784.678022] ? check_preemption_disabled+0x48/0x280 [ 1784.683054] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 03:55:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1784.688604] ? check_preemption_disabled+0x48/0x280 [ 1784.693728] ? check_preemption_disabled+0x48/0x280 [ 1784.698768] ? __lock_is_held+0xb5/0x140 [ 1784.702850] ? lock_acquire+0x1ed/0x520 [ 1784.706840] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1784.711863] ? lock_release+0x970/0x970 [ 1784.715834] ? kvm_gen_update_masterclock+0x350/0x350 [ 1784.721026] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1784.725537] ? preempt_notifier_dec+0x20/0x20 [ 1784.730053] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1784.734912] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1784.739968] kvm_vcpu_ioctl+0x72b/0x1150 [ 1784.744043] ? kvm_vcpu_block+0x1030/0x1030 [ 1784.748384] ? find_held_lock+0x36/0x1c0 [ 1784.748411] ? __fget+0x4aa/0x740 [ 1784.748433] ? check_preemption_disabled+0x48/0x280 [ 1784.748457] ? kasan_check_read+0x11/0x20 [ 1784.748479] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1784.755987] ? rcu_bh_qs+0xc0/0xc0 [ 1784.773945] ? __fget+0x4d1/0x740 [ 1784.777421] ? ksys_dup3+0x680/0x680 [ 1784.781139] ? find_held_lock+0x36/0x1c0 [ 1784.785235] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1784.790186] ? kvm_vcpu_block+0x1030/0x1030 [ 1784.794520] do_vfs_ioctl+0x1de/0x1720 [ 1784.798404] ? __lock_is_held+0xb5/0x140 [ 1784.802482] ? ioctl_preallocate+0x300/0x300 [ 1784.806904] ? __fget_light+0x2e9/0x430 [ 1784.810897] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1784.816445] ? smack_file_ioctl+0x210/0x3c0 [ 1784.820775] ? fget_raw+0x20/0x20 [ 1784.824247] ? smack_file_lock+0x2e0/0x2e0 [ 1784.828495] ? __sb_end_write+0xd9/0x110 [ 1784.832575] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1784.838119] ? fput+0x130/0x1a0 [ 1784.841430] ? do_syscall_64+0x9a/0x820 [ 1784.845395] ? do_syscall_64+0x9a/0x820 [ 1784.849374] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1784.854926] ? security_file_ioctl+0x94/0xc0 [ 1784.859347] ksys_ioctl+0xa9/0xd0 [ 1784.862821] __x64_sys_ioctl+0x73/0xb0 [ 1784.866714] do_syscall_64+0x1b9/0x820 [ 1784.870592] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1784.875961] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1784.880875] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1784.885720] ? trace_hardirqs_on_caller+0x310/0x310 [ 1784.890742] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1784.895760] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1784.900783] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1784.905637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1784.910827] RIP: 0033:0x457569 [ 1784.914015] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1784.932902] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:56 executing program 2 (fault-call:5 fault-nth:8): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1784.940617] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1784.947931] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1784.955219] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1784.962489] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1784.969751] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1785.040735] FAULT_INJECTION: forcing a failure. [ 1785.040735] name failslab, interval 1, probability 0, space 0, times 0 [ 1785.052106] CPU: 1 PID: 17057 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1785.059380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1785.068744] Call Trace: [ 1785.071342] dump_stack+0x1c4/0x2b6 [ 1785.074988] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1785.080177] ? __kernel_text_address+0xd/0x40 [ 1785.084678] ? unwind_get_return_address+0x61/0xa0 [ 1785.089612] should_fail.cold.4+0xa/0x17 [ 1785.093681] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1785.098797] ? save_stack+0xa9/0xd0 [ 1785.102421] ? graph_lock+0x170/0x170 [ 1785.106233] ? kasan_slab_alloc+0x12/0x20 [ 1785.110383] ? kmem_cache_alloc+0x12e/0x730 [ 1785.114715] ? mmu_topup_memory_caches+0xf7/0x390 [ 1785.119571] ? kvm_mmu_load+0x21/0xfa0 [ 1785.123472] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1785.127970] ? graph_lock+0x170/0x170 [ 1785.131774] ? ksys_ioctl+0xa9/0xd0 [ 1785.135387] ? __x64_sys_ioctl+0x73/0xb0 [ 1785.139437] ? do_syscall_64+0x1b9/0x820 [ 1785.143496] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1785.148869] ? find_held_lock+0x36/0x1c0 [ 1785.152928] ? __lock_is_held+0xb5/0x140 [ 1785.156996] ? ___might_sleep+0x1ed/0x300 [ 1785.161134] ? arch_local_save_flags+0x40/0x40 [ 1785.165733] __should_failslab+0x124/0x180 [ 1785.169972] should_failslab+0x9/0x14 [ 1785.173772] kmem_cache_alloc+0x2be/0x730 [ 1785.177932] ? vmx_flush_tlb_gva+0x380/0x380 [ 1785.182334] ? ima_get_action+0x7e/0xa0 [ 1785.186306] ? mmu_topup_memory_caches+0xf7/0x390 [ 1785.191153] mmu_topup_memory_caches+0xf7/0x390 [ 1785.195822] kvm_mmu_load+0x21/0xfa0 [ 1785.199547] vcpu_enter_guest+0x3dbe/0x6380 [ 1785.203868] ? emulator_read_emulated+0x50/0x50 [ 1785.208532] ? vmx_vcpu_load+0xb06/0x1030 [ 1785.212712] ? vmx_write_tsc_offset+0x680/0x680 [ 1785.217392] ? graph_lock+0x170/0x170 [ 1785.221194] ? lock_downgrade+0x900/0x900 [ 1785.225345] ? check_preemption_disabled+0x48/0x280 [ 1785.230356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1785.235893] ? check_preemption_disabled+0x48/0x280 [ 1785.240941] ? check_preemption_disabled+0x48/0x280 [ 1785.245982] ? __lock_is_held+0xb5/0x140 [ 1785.250063] ? lock_acquire+0x1ed/0x520 [ 1785.254225] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1785.259255] ? lock_release+0x970/0x970 [ 1785.263232] ? kvm_gen_update_masterclock+0x350/0x350 [ 1785.268437] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1785.272949] ? preempt_notifier_dec+0x20/0x20 [ 1785.277473] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1785.282315] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1785.287338] kvm_vcpu_ioctl+0x72b/0x1150 [ 1785.291405] ? kvm_vcpu_block+0x1030/0x1030 [ 1785.295740] ? find_held_lock+0x36/0x1c0 [ 1785.299825] ? __fget+0x4aa/0x740 [ 1785.303286] ? check_preemption_disabled+0x48/0x280 [ 1785.308323] ? kasan_check_read+0x11/0x20 [ 1785.312467] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1785.317754] ? rcu_bh_qs+0xc0/0xc0 [ 1785.321318] ? __fget+0x4d1/0x740 [ 1785.324774] ? ksys_dup3+0x680/0x680 [ 1785.328475] ? find_held_lock+0x36/0x1c0 [ 1785.332543] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1785.337477] ? kvm_vcpu_block+0x1030/0x1030 [ 1785.341807] do_vfs_ioctl+0x1de/0x1720 [ 1785.345713] ? __lock_is_held+0xb5/0x140 [ 1785.349788] ? ioctl_preallocate+0x300/0x300 [ 1785.354206] ? __fget_light+0x2e9/0x430 [ 1785.358178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1785.363713] ? smack_file_ioctl+0x210/0x3c0 [ 1785.368023] ? fget_raw+0x20/0x20 [ 1785.371466] ? smack_file_lock+0x2e0/0x2e0 [ 1785.375701] ? __sb_end_write+0xd9/0x110 [ 1785.379752] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1785.385275] ? fput+0x130/0x1a0 [ 1785.388544] ? do_syscall_64+0x9a/0x820 [ 1785.392515] ? do_syscall_64+0x9a/0x820 [ 1785.396482] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1785.402013] ? security_file_ioctl+0x94/0xc0 [ 1785.406413] ksys_ioctl+0xa9/0xd0 [ 1785.409856] __x64_sys_ioctl+0x73/0xb0 [ 1785.413748] do_syscall_64+0x1b9/0x820 [ 1785.417649] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1785.423017] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1785.427953] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1785.432800] ? trace_hardirqs_on_caller+0x310/0x310 [ 1785.437802] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1785.442821] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1785.447842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1785.452701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1785.457891] RIP: 0033:0x457569 [ 1785.461090] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1785.479996] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1785.487713] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1785.494981] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1785.502250] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1785.509514] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1785.516785] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:55:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:57 executing program 2 (fault-call:5 fault-nth:9): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:55:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1786.659321] FAULT_INJECTION: forcing a failure. [ 1786.659321] name failslab, interval 1, probability 0, space 0, times 0 [ 1786.671063] CPU: 0 PID: 17098 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1786.678352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1786.687709] Call Trace: [ 1786.690288] dump_stack+0x1c4/0x2b6 [ 1786.693908] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1786.699108] ? __kernel_text_address+0xd/0x40 [ 1786.703601] ? unwind_get_return_address+0x61/0xa0 [ 1786.708539] should_fail.cold.4+0xa/0x17 [ 1786.712596] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1786.717691] ? save_stack+0xa9/0xd0 [ 1786.721326] ? graph_lock+0x170/0x170 [ 1786.725127] ? kasan_slab_alloc+0x12/0x20 [ 1786.729265] ? kmem_cache_alloc+0x12e/0x730 [ 1786.733587] ? mmu_topup_memory_caches+0xf7/0x390 [ 1786.738436] ? kvm_mmu_load+0x21/0xfa0 [ 1786.742311] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1786.746807] ? graph_lock+0x170/0x170 [ 1786.750610] ? ksys_ioctl+0xa9/0xd0 [ 1786.754225] ? __x64_sys_ioctl+0x73/0xb0 [ 1786.758273] ? do_syscall_64+0x1b9/0x820 [ 1786.762324] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1786.767806] ? find_held_lock+0x36/0x1c0 [ 1786.771859] ? __lock_is_held+0xb5/0x140 [ 1786.775945] ? ___might_sleep+0x1ed/0x300 [ 1786.780097] ? arch_local_save_flags+0x40/0x40 [ 1786.784673] __should_failslab+0x124/0x180 [ 1786.788912] should_failslab+0x9/0x14 [ 1786.792736] kmem_cache_alloc+0x2be/0x730 [ 1786.796886] ? vmx_flush_tlb_gva+0x380/0x380 [ 1786.801297] ? ima_get_action+0x7e/0xa0 [ 1786.805282] ? mmu_topup_memory_caches+0xf7/0x390 [ 1786.810131] mmu_topup_memory_caches+0xf7/0x390 [ 1786.814821] kvm_mmu_load+0x21/0xfa0 [ 1786.818548] vcpu_enter_guest+0x3dbe/0x6380 [ 1786.822880] ? emulator_read_emulated+0x50/0x50 [ 1786.827564] ? vmx_vcpu_load+0xb06/0x1030 [ 1786.831716] ? vmx_write_tsc_offset+0x680/0x680 [ 1786.836389] ? graph_lock+0x170/0x170 [ 1786.840196] ? lock_downgrade+0x900/0x900 [ 1786.844357] ? check_preemption_disabled+0x48/0x280 [ 1786.849377] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1786.854903] ? check_preemption_disabled+0x48/0x280 [ 1786.859941] ? check_preemption_disabled+0x48/0x280 [ 1786.864964] ? __lock_is_held+0xb5/0x140 [ 1786.869015] ? lock_acquire+0x1ed/0x520 [ 1786.872993] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1786.878003] ? lock_release+0x970/0x970 [ 1786.881964] ? kvm_gen_update_masterclock+0x350/0x350 [ 1786.887147] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1786.891665] ? preempt_notifier_dec+0x20/0x20 [ 1786.896178] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1786.901029] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1786.906057] kvm_vcpu_ioctl+0x72b/0x1150 [ 1786.910124] ? kvm_vcpu_block+0x1030/0x1030 [ 1786.914471] ? find_held_lock+0x36/0x1c0 [ 1786.918536] ? __fget+0x4aa/0x740 [ 1786.921981] ? check_preemption_disabled+0x48/0x280 [ 1786.926990] ? kasan_check_read+0x11/0x20 [ 1786.931155] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1786.936429] ? rcu_bh_qs+0xc0/0xc0 [ 1786.939979] ? __fget+0x4d1/0x740 [ 1786.943424] ? ksys_dup3+0x680/0x680 [ 1786.947134] ? find_held_lock+0x36/0x1c0 [ 1786.951211] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1786.956149] ? kvm_vcpu_block+0x1030/0x1030 [ 1786.960477] do_vfs_ioctl+0x1de/0x1720 [ 1786.964350] ? __lock_is_held+0xb5/0x140 [ 1786.968420] ? ioctl_preallocate+0x300/0x300 [ 1786.973011] ? __fget_light+0x2e9/0x430 [ 1786.976995] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1786.982535] ? smack_file_ioctl+0x210/0x3c0 [ 1786.986855] ? fget_raw+0x20/0x20 [ 1786.990309] ? smack_file_lock+0x2e0/0x2e0 [ 1786.994532] ? __sb_end_write+0xd9/0x110 [ 1786.998581] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1787.004235] ? fput+0x130/0x1a0 [ 1787.007512] ? do_syscall_64+0x9a/0x820 [ 1787.011488] ? do_syscall_64+0x9a/0x820 [ 1787.015479] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1787.021031] ? security_file_ioctl+0x94/0xc0 [ 1787.025461] ksys_ioctl+0xa9/0xd0 [ 1787.028941] __x64_sys_ioctl+0x73/0xb0 [ 1787.032832] do_syscall_64+0x1b9/0x820 [ 1787.036720] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1787.042095] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1787.047023] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1787.051857] ? trace_hardirqs_on_caller+0x310/0x310 [ 1787.056871] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1787.061893] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1787.066930] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1787.071794] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1787.076996] RIP: 0033:0x457569 [ 1787.080211] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1787.099109] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:58 executing program 2 (fault-call:5 fault-nth:10): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1787.106820] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1787.114083] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1787.121352] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1787.128622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1787.135881] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1787.204798] FAULT_INJECTION: forcing a failure. [ 1787.204798] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.216086] CPU: 0 PID: 17117 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1787.223377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1787.232718] Call Trace: [ 1787.235295] dump_stack+0x1c4/0x2b6 [ 1787.238937] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1787.245609] ? __kernel_text_address+0xd/0x40 [ 1787.250110] ? unwind_get_return_address+0x61/0xa0 [ 1787.255049] should_fail.cold.4+0xa/0x17 [ 1787.259115] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1787.264234] ? save_stack+0xa9/0xd0 [ 1787.267861] ? graph_lock+0x170/0x170 [ 1787.271655] ? kasan_slab_alloc+0x12/0x20 [ 1787.275791] ? kmem_cache_alloc+0x12e/0x730 [ 1787.280105] ? mmu_topup_memory_caches+0xf7/0x390 [ 1787.284958] ? kvm_mmu_load+0x21/0xfa0 [ 1787.288847] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1787.293350] ? graph_lock+0x170/0x170 [ 1787.297153] ? ksys_ioctl+0xa9/0xd0 [ 1787.300764] ? __x64_sys_ioctl+0x73/0xb0 [ 1787.304820] ? do_syscall_64+0x1b9/0x820 [ 1787.308882] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1787.314274] ? find_held_lock+0x36/0x1c0 [ 1787.318339] ? __lock_is_held+0xb5/0x140 [ 1787.322402] ? ___might_sleep+0x1ed/0x300 [ 1787.326559] ? arch_local_save_flags+0x40/0x40 [ 1787.331164] __should_failslab+0x124/0x180 [ 1787.335418] should_failslab+0x9/0x14 [ 1787.339235] kmem_cache_alloc+0x2be/0x730 [ 1787.343382] ? vmx_flush_tlb_gva+0x380/0x380 [ 1787.347798] ? ima_get_action+0x7e/0xa0 [ 1787.351775] ? mmu_topup_memory_caches+0xf7/0x390 [ 1787.356625] mmu_topup_memory_caches+0xf7/0x390 [ 1787.361307] kvm_mmu_load+0x21/0xfa0 [ 1787.365050] vcpu_enter_guest+0x3dbe/0x6380 [ 1787.369379] ? emulator_read_emulated+0x50/0x50 [ 1787.374054] ? vmx_vcpu_load+0xb06/0x1030 [ 1787.378210] ? vmx_write_tsc_offset+0x680/0x680 [ 1787.382868] ? graph_lock+0x170/0x170 [ 1787.386658] ? lock_downgrade+0x900/0x900 [ 1787.390817] ? check_preemption_disabled+0x48/0x280 [ 1787.395846] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1787.401388] ? check_preemption_disabled+0x48/0x280 [ 1787.406413] ? check_preemption_disabled+0x48/0x280 [ 1787.411447] ? __lock_is_held+0xb5/0x140 [ 1787.415512] ? lock_acquire+0x1ed/0x520 [ 1787.419477] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1787.424491] ? lock_release+0x970/0x970 [ 1787.428464] ? kvm_gen_update_masterclock+0x350/0x350 [ 1787.433662] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1787.438168] ? preempt_notifier_dec+0x20/0x20 [ 1787.442691] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1787.447537] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1787.452579] kvm_vcpu_ioctl+0x72b/0x1150 [ 1787.456644] ? kvm_vcpu_block+0x1030/0x1030 [ 1787.460971] ? find_held_lock+0x36/0x1c0 [ 1787.465064] ? __fget+0x4aa/0x740 [ 1787.468512] ? check_preemption_disabled+0x48/0x280 [ 1787.473533] ? kasan_check_read+0x11/0x20 [ 1787.477699] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1787.482978] ? rcu_bh_qs+0xc0/0xc0 [ 1787.486516] ? __fget+0x4d1/0x740 [ 1787.489959] ? ksys_dup3+0x680/0x680 [ 1787.493674] ? find_held_lock+0x36/0x1c0 [ 1787.497741] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1787.502685] ? kvm_vcpu_block+0x1030/0x1030 [ 1787.507019] do_vfs_ioctl+0x1de/0x1720 [ 1787.510911] ? __lock_is_held+0xb5/0x140 [ 1787.514974] ? ioctl_preallocate+0x300/0x300 [ 1787.519384] ? __fget_light+0x2e9/0x430 [ 1787.523357] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1787.528883] ? smack_file_ioctl+0x210/0x3c0 [ 1787.533202] ? fget_raw+0x20/0x20 [ 1787.536644] ? smack_file_lock+0x2e0/0x2e0 [ 1787.540865] ? __sb_end_write+0xd9/0x110 [ 1787.544938] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1787.550478] ? fput+0x130/0x1a0 [ 1787.553757] ? do_syscall_64+0x9a/0x820 [ 1787.557735] ? do_syscall_64+0x9a/0x820 [ 1787.561709] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1787.567249] ? security_file_ioctl+0x94/0xc0 [ 1787.571647] ksys_ioctl+0xa9/0xd0 [ 1787.575092] __x64_sys_ioctl+0x73/0xb0 [ 1787.578970] do_syscall_64+0x1b9/0x820 [ 1787.582848] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1787.588208] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1787.593126] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1787.597959] ? trace_hardirqs_on_caller+0x310/0x310 [ 1787.602969] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1787.607988] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1787.613002] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1787.617864] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1787.623061] RIP: 0033:0x457569 [ 1787.626256] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1787.645151] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1787.652874] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1787.660139] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1787.667406] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1787.674688] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1787.681958] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:55:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:58 executing program 2 (fault-call:5 fault-nth:11): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1787.824383] FAULT_INJECTION: forcing a failure. [ 1787.824383] name failslab, interval 1, probability 0, space 0, times 0 [ 1787.836212] CPU: 1 PID: 17145 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1787.843496] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1787.852842] Call Trace: [ 1787.855438] dump_stack+0x1c4/0x2b6 [ 1787.859063] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1787.864277] ? __kernel_text_address+0xd/0x40 [ 1787.868772] ? unwind_get_return_address+0x61/0xa0 [ 1787.873715] should_fail.cold.4+0xa/0x17 [ 1787.877767] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1787.882879] ? save_stack+0xa9/0xd0 [ 1787.886525] ? graph_lock+0x170/0x170 [ 1787.890317] ? kasan_slab_alloc+0x12/0x20 [ 1787.894465] ? kmem_cache_alloc+0x12e/0x730 [ 1787.898805] ? mmu_topup_memory_caches+0xf7/0x390 [ 1787.903643] ? kvm_mmu_load+0x21/0xfa0 [ 1787.907532] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1787.912018] ? graph_lock+0x170/0x170 [ 1787.915813] ? ksys_ioctl+0xa9/0xd0 [ 1787.919462] ? __x64_sys_ioctl+0x73/0xb0 [ 1787.923514] ? do_syscall_64+0x1b9/0x820 [ 1787.927572] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1787.932959] ? find_held_lock+0x36/0x1c0 [ 1787.937026] ? __lock_is_held+0xb5/0x140 [ 1787.941082] ? ___might_sleep+0x1ed/0x300 [ 1787.945232] ? arch_local_save_flags+0x40/0x40 [ 1787.949841] __should_failslab+0x124/0x180 [ 1787.954079] should_failslab+0x9/0x14 [ 1787.957869] kmem_cache_alloc+0x2be/0x730 [ 1787.962018] ? vmx_flush_tlb_gva+0x380/0x380 [ 1787.966432] ? ima_get_action+0x7e/0xa0 [ 1787.970414] ? mmu_topup_memory_caches+0xf7/0x390 [ 1787.975274] mmu_topup_memory_caches+0xf7/0x390 [ 1787.979970] kvm_mmu_load+0x21/0xfa0 [ 1787.983720] vcpu_enter_guest+0x3dbe/0x6380 [ 1787.988065] ? emulator_read_emulated+0x50/0x50 [ 1787.992754] ? vmx_vcpu_load+0xb06/0x1030 [ 1787.996906] ? vmx_write_tsc_offset+0x680/0x680 [ 1788.001582] ? graph_lock+0x170/0x170 [ 1788.005386] ? lock_downgrade+0x900/0x900 [ 1788.009545] ? check_preemption_disabled+0x48/0x280 [ 1788.014570] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1788.020122] ? check_preemption_disabled+0x48/0x280 [ 1788.025149] ? check_preemption_disabled+0x48/0x280 [ 1788.030186] ? __lock_is_held+0xb5/0x140 [ 1788.030208] ? lock_acquire+0x1ed/0x520 [ 1788.030225] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1788.030247] ? lock_release+0x970/0x970 [ 1788.030269] ? kvm_gen_update_masterclock+0x350/0x350 [ 1788.038291] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1788.056913] ? preempt_notifier_dec+0x20/0x20 [ 1788.061451] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1788.066306] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1788.071350] kvm_vcpu_ioctl+0x72b/0x1150 03:55:59 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1788.075429] ? kvm_vcpu_block+0x1030/0x1030 [ 1788.079770] ? find_held_lock+0x36/0x1c0 [ 1788.083856] ? __fget+0x4aa/0x740 [ 1788.087323] ? check_preemption_disabled+0x48/0x280 [ 1788.092365] ? kasan_check_read+0x11/0x20 [ 1788.096525] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1788.101805] ? rcu_bh_qs+0xc0/0xc0 [ 1788.105339] ? __fget+0x4d1/0x740 [ 1788.108799] ? ksys_dup3+0x680/0x680 [ 1788.112527] ? find_held_lock+0x36/0x1c0 [ 1788.116597] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1788.121538] ? kvm_vcpu_block+0x1030/0x1030 [ 1788.125857] do_vfs_ioctl+0x1de/0x1720 [ 1788.129745] ? __lock_is_held+0xb5/0x140 [ 1788.133812] ? ioctl_preallocate+0x300/0x300 [ 1788.138212] ? __fget_light+0x2e9/0x430 [ 1788.142188] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1788.147738] ? smack_file_ioctl+0x210/0x3c0 [ 1788.152062] ? fget_raw+0x20/0x20 [ 1788.155516] ? smack_file_lock+0x2e0/0x2e0 [ 1788.159763] ? __sb_end_write+0xd9/0x110 [ 1788.163827] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1788.169357] ? fput+0x130/0x1a0 [ 1788.172651] ? do_syscall_64+0x9a/0x820 [ 1788.176640] ? do_syscall_64+0x9a/0x820 [ 1788.180618] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1788.186153] ? security_file_ioctl+0x94/0xc0 [ 1788.190564] ksys_ioctl+0xa9/0xd0 [ 1788.194030] __x64_sys_ioctl+0x73/0xb0 [ 1788.197940] do_syscall_64+0x1b9/0x820 [ 1788.201818] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1788.207173] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1788.212093] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1788.216946] ? trace_hardirqs_on_caller+0x310/0x310 [ 1788.221968] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1788.226972] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1788.231981] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1788.236818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1788.241997] RIP: 0033:0x457569 [ 1788.245181] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1788.264102] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:55:59 executing program 2 (fault-call:5 fault-nth:12): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1788.271835] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1788.279118] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1788.286385] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1788.293657] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1788.300914] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1788.394429] FAULT_INJECTION: forcing a failure. [ 1788.394429] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.405980] CPU: 0 PID: 17171 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1788.413247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.422586] Call Trace: [ 1788.425186] dump_stack+0x1c4/0x2b6 [ 1788.428842] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1788.434040] ? __kernel_text_address+0xd/0x40 [ 1788.438548] ? unwind_get_return_address+0x61/0xa0 [ 1788.443499] should_fail.cold.4+0xa/0x17 [ 1788.447563] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1788.452656] ? save_stack+0xa9/0xd0 [ 1788.456274] ? graph_lock+0x170/0x170 [ 1788.460081] ? kasan_slab_alloc+0x12/0x20 [ 1788.464252] ? kmem_cache_alloc+0x12e/0x730 [ 1788.468574] ? mmu_topup_memory_caches+0xf7/0x390 [ 1788.473403] ? kvm_mmu_load+0x21/0xfa0 [ 1788.477278] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1788.481773] ? graph_lock+0x170/0x170 [ 1788.485563] ? ksys_ioctl+0xa9/0xd0 [ 1788.489221] ? __x64_sys_ioctl+0x73/0xb0 [ 1788.493269] ? do_syscall_64+0x1b9/0x820 [ 1788.497343] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1788.502730] ? find_held_lock+0x36/0x1c0 [ 1788.506781] ? __lock_is_held+0xb5/0x140 [ 1788.510851] ? ___might_sleep+0x1ed/0x300 [ 1788.515003] ? arch_local_save_flags+0x40/0x40 [ 1788.519577] __should_failslab+0x124/0x180 [ 1788.523817] should_failslab+0x9/0x14 [ 1788.527623] kmem_cache_alloc+0x2be/0x730 [ 1788.531756] ? vmx_flush_tlb_gva+0x380/0x380 [ 1788.536165] ? ima_get_action+0x7e/0xa0 [ 1788.540156] ? mmu_topup_memory_caches+0xf7/0x390 [ 1788.545005] mmu_topup_memory_caches+0xf7/0x390 [ 1788.549673] kvm_mmu_load+0x21/0xfa0 [ 1788.553387] vcpu_enter_guest+0x3dbe/0x6380 [ 1788.557702] ? emulator_read_emulated+0x50/0x50 [ 1788.562364] ? vmx_vcpu_load+0xb06/0x1030 [ 1788.566520] ? vmx_write_tsc_offset+0x680/0x680 [ 1788.571201] ? graph_lock+0x170/0x170 [ 1788.574988] ? lock_downgrade+0x900/0x900 [ 1788.579137] ? check_preemption_disabled+0x48/0x280 [ 1788.584164] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1788.589690] ? check_preemption_disabled+0x48/0x280 [ 1788.594705] ? check_preemption_disabled+0x48/0x280 [ 1788.599727] ? __lock_is_held+0xb5/0x140 [ 1788.603778] ? lock_acquire+0x1ed/0x520 [ 1788.607756] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1788.612764] ? lock_release+0x970/0x970 [ 1788.616752] ? kvm_gen_update_masterclock+0x350/0x350 [ 1788.621939] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1788.626424] ? preempt_notifier_dec+0x20/0x20 [ 1788.630915] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1788.635757] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1788.640784] kvm_vcpu_ioctl+0x72b/0x1150 [ 1788.644837] ? kvm_vcpu_block+0x1030/0x1030 [ 1788.649170] ? find_held_lock+0x36/0x1c0 [ 1788.653251] ? __fget+0x4aa/0x740 [ 1788.656699] ? check_preemption_disabled+0x48/0x280 [ 1788.661711] ? kasan_check_read+0x11/0x20 [ 1788.665849] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1788.671115] ? rcu_bh_qs+0xc0/0xc0 [ 1788.674651] ? __fget+0x4d1/0x740 [ 1788.678107] ? ksys_dup3+0x680/0x680 [ 1788.681825] ? find_held_lock+0x36/0x1c0 [ 1788.685876] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1788.690817] ? kvm_vcpu_block+0x1030/0x1030 [ 1788.695141] do_vfs_ioctl+0x1de/0x1720 [ 1788.699052] ? __lock_is_held+0xb5/0x140 [ 1788.703119] ? ioctl_preallocate+0x300/0x300 [ 1788.707513] ? __fget_light+0x2e9/0x430 [ 1788.711485] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1788.717029] ? smack_file_ioctl+0x210/0x3c0 [ 1788.721346] ? fget_raw+0x20/0x20 [ 1788.724815] ? smack_file_lock+0x2e0/0x2e0 [ 1788.729055] ? __sb_end_write+0xd9/0x110 [ 1788.733137] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1788.738677] ? fput+0x130/0x1a0 [ 1788.741968] ? do_syscall_64+0x9a/0x820 [ 1788.745948] ? do_syscall_64+0x9a/0x820 [ 1788.749938] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1788.755507] ? security_file_ioctl+0x94/0xc0 [ 1788.759940] ksys_ioctl+0xa9/0xd0 [ 1788.763403] __x64_sys_ioctl+0x73/0xb0 [ 1788.767297] do_syscall_64+0x1b9/0x820 [ 1788.771187] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1788.776555] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1788.781480] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1788.786329] ? trace_hardirqs_on_caller+0x310/0x310 [ 1788.791445] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1788.796464] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1788.801470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1788.806307] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1788.811493] RIP: 0033:0x457569 [ 1788.814677] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1788.833571] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:55:59 executing program 2 (fault-call:5 fault-nth:13): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1788.841283] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1788.848546] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1788.855809] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1788.863078] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1788.870341] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1788.951111] FAULT_INJECTION: forcing a failure. [ 1788.951111] name failslab, interval 1, probability 0, space 0, times 0 [ 1788.963510] CPU: 0 PID: 17176 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1788.970801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1788.980160] Call Trace: [ 1788.982778] dump_stack+0x1c4/0x2b6 [ 1788.986433] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1788.991642] ? __kernel_text_address+0xd/0x40 [ 1788.996158] ? unwind_get_return_address+0x61/0xa0 [ 1789.001120] should_fail.cold.4+0xa/0x17 [ 1789.005210] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1789.010330] ? save_stack+0xa9/0xd0 [ 1789.013971] ? graph_lock+0x170/0x170 [ 1789.017760] ? kasan_slab_alloc+0x12/0x20 [ 1789.021905] ? kmem_cache_alloc+0x12e/0x730 [ 1789.026226] ? mmu_topup_memory_caches+0xf7/0x390 [ 1789.031061] ? kvm_mmu_load+0x21/0xfa0 [ 1789.034965] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1789.039449] ? graph_lock+0x170/0x170 [ 1789.043246] ? ksys_ioctl+0xa9/0xd0 [ 1789.046873] ? __x64_sys_ioctl+0x73/0xb0 [ 1789.050936] ? do_syscall_64+0x1b9/0x820 [ 1789.055013] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1789.060375] ? find_held_lock+0x36/0x1c0 [ 1789.064426] ? __lock_is_held+0xb5/0x140 [ 1789.068488] ? ___might_sleep+0x1ed/0x300 [ 1789.072651] ? arch_local_save_flags+0x40/0x40 [ 1789.077251] __should_failslab+0x124/0x180 [ 1789.081499] should_failslab+0x9/0x14 [ 1789.085296] kmem_cache_alloc+0x2be/0x730 [ 1789.089458] ? vmx_flush_tlb_gva+0x380/0x380 [ 1789.093870] ? ima_get_action+0x7e/0xa0 [ 1789.097860] ? mmu_topup_memory_caches+0xf7/0x390 [ 1789.102706] mmu_topup_memory_caches+0xf7/0x390 [ 1789.107387] kvm_mmu_load+0x21/0xfa0 [ 1789.111101] vcpu_enter_guest+0x3dbe/0x6380 [ 1789.115423] ? emulator_read_emulated+0x50/0x50 [ 1789.120084] ? vmx_vcpu_load+0xb06/0x1030 [ 1789.124241] ? vmx_write_tsc_offset+0x680/0x680 [ 1789.128930] ? graph_lock+0x170/0x170 [ 1789.132759] ? lock_downgrade+0x900/0x900 [ 1789.136908] ? check_preemption_disabled+0x48/0x280 [ 1789.141948] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1789.147475] ? check_preemption_disabled+0x48/0x280 [ 1789.152480] ? check_preemption_disabled+0x48/0x280 [ 1789.157489] ? __lock_is_held+0xb5/0x140 [ 1789.161540] ? lock_acquire+0x1ed/0x520 [ 1789.165504] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1789.170513] ? lock_release+0x970/0x970 [ 1789.174494] ? kvm_gen_update_masterclock+0x350/0x350 [ 1789.179703] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1789.184207] ? preempt_notifier_dec+0x20/0x20 [ 1789.188703] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1789.193564] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1789.198594] kvm_vcpu_ioctl+0x72b/0x1150 [ 1789.202659] ? kvm_vcpu_block+0x1030/0x1030 [ 1789.206970] ? find_held_lock+0x36/0x1c0 [ 1789.211037] ? __fget+0x4aa/0x740 [ 1789.214506] ? check_preemption_disabled+0x48/0x280 [ 1789.219537] ? kasan_check_read+0x11/0x20 [ 1789.223684] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1789.228963] ? rcu_bh_qs+0xc0/0xc0 [ 1789.232511] ? __fget+0x4d1/0x740 [ 1789.235973] ? ksys_dup3+0x680/0x680 [ 1789.239686] ? find_held_lock+0x36/0x1c0 [ 1789.243762] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1789.248713] ? kvm_vcpu_block+0x1030/0x1030 [ 1789.253127] do_vfs_ioctl+0x1de/0x1720 [ 1789.257018] ? __lock_is_held+0xb5/0x140 [ 1789.261068] ? ioctl_preallocate+0x300/0x300 [ 1789.265495] ? __fget_light+0x2e9/0x430 [ 1789.269461] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1789.274996] ? smack_file_ioctl+0x210/0x3c0 [ 1789.279402] ? fget_raw+0x20/0x20 [ 1789.282873] ? smack_file_lock+0x2e0/0x2e0 [ 1789.287111] ? __sb_end_write+0xd9/0x110 [ 1789.291188] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1789.296736] ? fput+0x130/0x1a0 [ 1789.300031] ? do_syscall_64+0x9a/0x820 [ 1789.304006] ? do_syscall_64+0x9a/0x820 [ 1789.308001] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1789.313545] ? security_file_ioctl+0x94/0xc0 [ 1789.317953] ksys_ioctl+0xa9/0xd0 [ 1789.321407] __x64_sys_ioctl+0x73/0xb0 [ 1789.325313] do_syscall_64+0x1b9/0x820 [ 1789.329210] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1789.334562] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1789.339495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1789.344327] ? trace_hardirqs_on_caller+0x310/0x310 [ 1789.349337] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1789.354345] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1789.359367] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1789.364238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1789.369439] RIP: 0033:0x457569 [ 1789.372636] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1789.391527] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1789.399225] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1789.406479] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1789.413733] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1789.420997] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1789.428266] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:00 executing program 2 (fault-call:5 fault-nth:14): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x8100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1789.677236] FAULT_INJECTION: forcing a failure. [ 1789.677236] name failslab, interval 1, probability 0, space 0, times 0 [ 1789.688712] CPU: 1 PID: 17206 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1789.695984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1789.705325] Call Trace: [ 1789.707905] dump_stack+0x1c4/0x2b6 [ 1789.711545] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1789.716745] ? __kernel_text_address+0xd/0x40 [ 1789.721244] ? unwind_get_return_address+0x61/0xa0 [ 1789.726183] should_fail.cold.4+0xa/0x17 [ 1789.730647] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1789.735753] ? save_stack+0xa9/0xd0 [ 1789.739395] ? graph_lock+0x170/0x170 [ 1789.743197] ? kasan_slab_alloc+0x12/0x20 [ 1789.747378] ? kmem_cache_alloc+0x12e/0x730 [ 1789.751720] ? mmu_topup_memory_caches+0xf7/0x390 [ 1789.756574] ? kvm_mmu_load+0x21/0xfa0 [ 1789.760481] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1789.764984] ? graph_lock+0x170/0x170 [ 1789.768787] ? ksys_ioctl+0xa9/0xd0 [ 1789.772400] ? __x64_sys_ioctl+0x73/0xb0 [ 1789.776459] ? do_syscall_64+0x1b9/0x820 [ 1789.780536] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1789.785933] ? find_held_lock+0x36/0x1c0 [ 1789.790008] ? __lock_is_held+0xb5/0x140 [ 1789.794084] ? ___might_sleep+0x1ed/0x300 [ 1789.798228] ? arch_local_save_flags+0x40/0x40 [ 1789.802821] __should_failslab+0x124/0x180 [ 1789.807062] should_failslab+0x9/0x14 [ 1789.810897] kmem_cache_alloc+0x2be/0x730 [ 1789.815073] ? vmx_flush_tlb_gva+0x380/0x380 [ 1789.819490] ? mark_held_locks+0xc7/0x130 [ 1789.823646] ? mmu_topup_memory_caches+0xf7/0x390 [ 1789.828504] mmu_topup_memory_caches+0xf7/0x390 [ 1789.833182] kvm_mmu_load+0x21/0xfa0 [ 1789.836890] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1789.842418] ? check_preemption_disabled+0x48/0x280 [ 1789.847431] vcpu_enter_guest+0x3dbe/0x6380 [ 1789.851765] ? emulator_read_emulated+0x50/0x50 [ 1789.856444] ? vmx_vcpu_load+0xb06/0x1030 [ 1789.860590] ? vmx_write_tsc_offset+0x680/0x680 [ 1789.865268] ? graph_lock+0x170/0x170 [ 1789.869091] ? lock_downgrade+0x900/0x900 [ 1789.873245] ? check_preemption_disabled+0x48/0x280 [ 1789.878264] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1789.883806] ? check_preemption_disabled+0x48/0x280 [ 1789.888832] ? check_preemption_disabled+0x48/0x280 [ 1789.893857] ? __lock_is_held+0xb5/0x140 [ 1789.897931] ? lock_acquire+0x1ed/0x520 [ 1789.901909] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1789.906962] ? lock_release+0x970/0x970 [ 1789.910959] ? kvm_gen_update_masterclock+0x350/0x350 [ 1789.916153] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1789.920637] ? preempt_notifier_dec+0x20/0x20 [ 1789.925126] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1789.929957] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1789.934970] kvm_vcpu_ioctl+0x72b/0x1150 [ 1789.939024] ? kvm_vcpu_block+0x1030/0x1030 [ 1789.943436] ? find_held_lock+0x36/0x1c0 [ 1789.947505] ? __fget+0x4aa/0x740 [ 1789.950980] ? check_preemption_disabled+0x48/0x280 [ 1789.956024] ? kasan_check_read+0x11/0x20 [ 1789.960180] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1789.965472] ? rcu_bh_qs+0xc0/0xc0 [ 1789.969038] ? __fget+0x4d1/0x740 [ 1789.972574] ? ksys_dup3+0x680/0x680 [ 1789.976303] ? find_held_lock+0x36/0x1c0 [ 1789.980376] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1789.985315] ? kvm_vcpu_block+0x1030/0x1030 [ 1789.989637] do_vfs_ioctl+0x1de/0x1720 [ 1789.993529] ? __lock_is_held+0xb5/0x140 [ 1789.997600] ? ioctl_preallocate+0x300/0x300 [ 1790.002015] ? __fget_light+0x2e9/0x430 [ 1790.005993] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1790.011521] ? smack_file_ioctl+0x210/0x3c0 [ 1790.015834] ? fget_raw+0x20/0x20 [ 1790.019287] ? smack_file_lock+0x2e0/0x2e0 [ 1790.023531] ? __sb_end_write+0xd9/0x110 [ 1790.027609] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1790.033153] ? fput+0x130/0x1a0 [ 1790.036445] ? do_syscall_64+0x9a/0x820 [ 1790.040433] ? do_syscall_64+0x9a/0x820 [ 1790.044423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1790.049968] ? security_file_ioctl+0x94/0xc0 [ 1790.049988] ksys_ioctl+0xa9/0xd0 [ 1790.050009] __x64_sys_ioctl+0x73/0xb0 [ 1790.050028] do_syscall_64+0x1b9/0x820 [ 1790.050044] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1790.050064] ? syscall_return_slowpath+0x5e0/0x5e0 03:56:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1790.075979] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1790.080836] ? trace_hardirqs_on_caller+0x310/0x310 [ 1790.085866] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1790.090903] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1790.095960] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1790.100827] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1790.106026] RIP: 0033:0x457569 [ 1790.109234] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:56:01 executing program 2 (fault-call:5 fault-nth:15): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1790.128141] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1790.135847] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1790.143130] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1790.150399] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1790.157656] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1790.164927] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1790.241834] FAULT_INJECTION: forcing a failure. [ 1790.241834] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.253540] CPU: 0 PID: 17231 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1790.260817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.270158] Call Trace: [ 1790.272748] dump_stack+0x1c4/0x2b6 [ 1790.276382] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1790.281561] ? __kernel_text_address+0xd/0x40 [ 1790.286061] ? unwind_get_return_address+0x61/0xa0 [ 1790.291015] should_fail.cold.4+0xa/0x17 [ 1790.295085] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1790.300208] ? save_stack+0xa9/0xd0 [ 1790.303832] ? graph_lock+0x170/0x170 [ 1790.307661] ? kasan_slab_alloc+0x12/0x20 [ 1790.311826] ? kmem_cache_alloc+0x12e/0x730 [ 1790.316164] ? mmu_topup_memory_caches+0xf7/0x390 [ 1790.321022] ? kvm_mmu_load+0x21/0xfa0 [ 1790.324913] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1790.329406] ? graph_lock+0x170/0x170 [ 1790.333215] ? ksys_ioctl+0xa9/0xd0 [ 1790.336843] ? __x64_sys_ioctl+0x73/0xb0 [ 1790.340894] ? do_syscall_64+0x1b9/0x820 [ 1790.344966] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1790.350352] ? find_held_lock+0x36/0x1c0 [ 1790.354416] ? __lock_is_held+0xb5/0x140 [ 1790.358479] ? ___might_sleep+0x1ed/0x300 [ 1790.362630] ? arch_local_save_flags+0x40/0x40 [ 1790.367244] __should_failslab+0x124/0x180 [ 1790.371492] should_failslab+0x9/0x14 [ 1790.375303] kmem_cache_alloc+0x2be/0x730 [ 1790.379463] ? vmx_flush_tlb_gva+0x380/0x380 [ 1790.383876] ? ima_get_action+0x7e/0xa0 [ 1790.387853] ? mmu_topup_memory_caches+0xf7/0x390 [ 1790.392703] mmu_topup_memory_caches+0xf7/0x390 [ 1790.397393] kvm_mmu_load+0x21/0xfa0 [ 1790.401136] vcpu_enter_guest+0x3dbe/0x6380 [ 1790.405483] ? emulator_read_emulated+0x50/0x50 [ 1790.410171] ? vmx_vcpu_load+0xb06/0x1030 [ 1790.414364] ? vmx_write_tsc_offset+0x680/0x680 [ 1790.419036] ? graph_lock+0x170/0x170 [ 1790.422854] ? lock_downgrade+0x900/0x900 [ 1790.427015] ? check_preemption_disabled+0x48/0x280 [ 1790.432047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1790.437600] ? check_preemption_disabled+0x48/0x280 [ 1790.442619] ? check_preemption_disabled+0x48/0x280 [ 1790.447648] ? __lock_is_held+0xb5/0x140 [ 1790.451725] ? lock_acquire+0x1ed/0x520 [ 1790.455695] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1790.460718] ? lock_release+0x970/0x970 [ 1790.464681] ? kvm_gen_update_masterclock+0x350/0x350 [ 1790.469894] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1790.474390] ? preempt_notifier_dec+0x20/0x20 [ 1790.478912] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1790.483767] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1790.488796] kvm_vcpu_ioctl+0x72b/0x1150 [ 1790.492867] ? kvm_vcpu_block+0x1030/0x1030 [ 1790.497201] ? find_held_lock+0x36/0x1c0 [ 1790.501267] ? __fget+0x4aa/0x740 [ 1790.504743] ? check_preemption_disabled+0x48/0x280 [ 1790.509785] ? kasan_check_read+0x11/0x20 [ 1790.513951] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1790.519235] ? rcu_bh_qs+0xc0/0xc0 [ 1790.522798] ? __fget+0x4d1/0x740 [ 1790.526283] ? ksys_dup3+0x680/0x680 [ 1790.530004] ? find_held_lock+0x36/0x1c0 [ 1790.534089] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1790.539044] ? kvm_vcpu_block+0x1030/0x1030 [ 1790.543384] do_vfs_ioctl+0x1de/0x1720 [ 1790.547275] ? __lock_is_held+0xb5/0x140 [ 1790.551344] ? ioctl_preallocate+0x300/0x300 [ 1790.555760] ? __fget_light+0x2e9/0x430 [ 1790.559725] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1790.565262] ? smack_file_ioctl+0x210/0x3c0 [ 1790.569598] ? fget_raw+0x20/0x20 [ 1790.573081] ? smack_file_lock+0x2e0/0x2e0 [ 1790.577319] ? __sb_end_write+0xd9/0x110 [ 1790.581386] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1790.586917] ? fput+0x130/0x1a0 [ 1790.590218] ? do_syscall_64+0x9a/0x820 [ 1790.594216] ? do_syscall_64+0x9a/0x820 [ 1790.598211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1790.603754] ? security_file_ioctl+0x94/0xc0 [ 1790.608152] ksys_ioctl+0xa9/0xd0 [ 1790.611614] __x64_sys_ioctl+0x73/0xb0 [ 1790.615495] do_syscall_64+0x1b9/0x820 [ 1790.619397] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1790.624764] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1790.629696] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1790.634548] ? trace_hardirqs_on_caller+0x310/0x310 [ 1790.639566] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1790.644586] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1790.649610] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1790.654462] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1790.659658] RIP: 0033:0x457569 [ 1790.662868] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1790.681777] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1790.689479] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1790.696743] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1790.704029] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1790.711310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1790.718582] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:01 executing program 2 (fault-call:5 fault-nth:16): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1790.916973] FAULT_INJECTION: forcing a failure. [ 1790.916973] name failslab, interval 1, probability 0, space 0, times 0 [ 1790.928497] CPU: 0 PID: 17265 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1790.935764] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1790.945108] Call Trace: [ 1790.947694] dump_stack+0x1c4/0x2b6 [ 1790.951316] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1790.956508] ? __kernel_text_address+0xd/0x40 [ 1790.961022] ? unwind_get_return_address+0x61/0xa0 [ 1790.965972] should_fail.cold.4+0xa/0x17 [ 1790.970036] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1790.975156] ? save_stack+0xa9/0xd0 [ 1790.978805] ? graph_lock+0x170/0x170 [ 1790.982612] ? kasan_slab_alloc+0x12/0x20 [ 1790.986758] ? kmem_cache_alloc+0x12e/0x730 [ 1790.991083] ? mmu_topup_memory_caches+0xf7/0x390 [ 1790.995936] ? kvm_mmu_load+0x21/0xfa0 [ 1790.999814] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1791.004302] ? graph_lock+0x170/0x170 [ 1791.008103] ? ksys_ioctl+0xa9/0xd0 [ 1791.011729] ? __x64_sys_ioctl+0x73/0xb0 [ 1791.015783] ? do_syscall_64+0x1b9/0x820 [ 1791.019858] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1791.025234] ? find_held_lock+0x36/0x1c0 [ 1791.029290] ? __lock_is_held+0xb5/0x140 [ 1791.033366] ? ___might_sleep+0x1ed/0x300 [ 1791.037517] ? arch_local_save_flags+0x40/0x40 [ 1791.042112] __should_failslab+0x124/0x180 [ 1791.046352] should_failslab+0x9/0x14 [ 1791.050158] kmem_cache_alloc+0x2be/0x730 [ 1791.054309] ? vmx_flush_tlb_gva+0x380/0x380 [ 1791.058721] ? ima_get_action+0x7e/0xa0 [ 1791.062697] ? mmu_topup_memory_caches+0xf7/0x390 [ 1791.067535] mmu_topup_memory_caches+0xf7/0x390 [ 1791.072208] kvm_mmu_load+0x21/0xfa0 [ 1791.075950] vcpu_enter_guest+0x3dbe/0x6380 [ 1791.080272] ? emulator_read_emulated+0x50/0x50 [ 1791.084959] ? vmx_vcpu_load+0xb06/0x1030 [ 1791.089128] ? vmx_write_tsc_offset+0x680/0x680 [ 1791.093801] ? graph_lock+0x170/0x170 [ 1791.097598] ? lock_downgrade+0x900/0x900 [ 1791.101751] ? check_preemption_disabled+0x48/0x280 [ 1791.106771] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1791.112326] ? check_preemption_disabled+0x48/0x280 [ 1791.117350] ? check_preemption_disabled+0x48/0x280 [ 1791.122383] ? __lock_is_held+0xb5/0x140 [ 1791.126459] ? lock_acquire+0x1ed/0x520 [ 1791.130526] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1791.135567] ? lock_release+0x970/0x970 [ 1791.139549] ? kvm_gen_update_masterclock+0x350/0x350 [ 1791.144729] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1791.149219] ? preempt_notifier_dec+0x20/0x20 [ 1791.153712] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1791.158560] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1791.163594] kvm_vcpu_ioctl+0x72b/0x1150 [ 1791.167676] ? kvm_vcpu_block+0x1030/0x1030 [ 1791.172004] ? find_held_lock+0x36/0x1c0 [ 1791.176058] ? __fget+0x4aa/0x740 [ 1791.179514] ? check_preemption_disabled+0x48/0x280 [ 1791.184549] ? kasan_check_read+0x11/0x20 [ 1791.188703] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1791.193976] ? rcu_bh_qs+0xc0/0xc0 [ 1791.197528] ? __fget+0x4d1/0x740 [ 1791.201021] ? ksys_dup3+0x680/0x680 [ 1791.204746] ? find_held_lock+0x36/0x1c0 [ 1791.208814] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1791.213746] ? kvm_vcpu_block+0x1030/0x1030 [ 1791.218056] do_vfs_ioctl+0x1de/0x1720 [ 1791.221950] ? __lock_is_held+0xb5/0x140 [ 1791.226024] ? ioctl_preallocate+0x300/0x300 [ 1791.230421] ? __fget_light+0x2e9/0x430 [ 1791.234399] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1791.239974] ? smack_file_ioctl+0x210/0x3c0 [ 1791.244282] ? fget_raw+0x20/0x20 [ 1791.247727] ? smack_file_lock+0x2e0/0x2e0 [ 1791.251962] ? __sb_end_write+0xd9/0x110 [ 1791.256038] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1791.261577] ? fput+0x130/0x1a0 [ 1791.264847] ? do_syscall_64+0x9a/0x820 [ 1791.268824] ? do_syscall_64+0x9a/0x820 [ 1791.272812] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1791.278347] ? security_file_ioctl+0x94/0xc0 [ 1791.282771] ksys_ioctl+0xa9/0xd0 [ 1791.286250] __x64_sys_ioctl+0x73/0xb0 [ 1791.290128] do_syscall_64+0x1b9/0x820 [ 1791.294010] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1791.299387] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1791.304341] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1791.309222] ? trace_hardirqs_on_caller+0x310/0x310 [ 1791.314245] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1791.319252] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1791.324272] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1791.329128] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1791.334670] RIP: 0033:0x457569 [ 1791.337857] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1791.356773] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:02 executing program 2 (fault-call:5 fault-nth:17): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1791.364487] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1791.371767] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1791.379048] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1791.386321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1791.393576] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1791.469025] FAULT_INJECTION: forcing a failure. [ 1791.469025] name failslab, interval 1, probability 0, space 0, times 0 [ 1791.481799] CPU: 0 PID: 17282 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1791.489097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1791.498463] Call Trace: [ 1791.501095] dump_stack+0x1c4/0x2b6 [ 1791.504751] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1791.504774] ? __kernel_text_address+0xd/0x40 [ 1791.504796] ? unwind_get_return_address+0x61/0xa0 [ 1791.504828] should_fail.cold.4+0xa/0x17 [ 1791.514498] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1791.514518] ? save_stack+0xa9/0xd0 [ 1791.514537] ? graph_lock+0x170/0x170 [ 1791.514550] ? kasan_slab_alloc+0x12/0x20 [ 1791.514567] ? kmem_cache_alloc+0x12e/0x730 [ 1791.514584] ? mmu_topup_memory_caches+0xf7/0x390 [ 1791.514596] ? kvm_mmu_load+0x21/0xfa0 [ 1791.514617] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1791.557737] ? graph_lock+0x170/0x170 [ 1791.561586] ? ksys_ioctl+0xa9/0xd0 [ 1791.565223] ? __x64_sys_ioctl+0x73/0xb0 [ 1791.569295] ? do_syscall_64+0x1b9/0x820 [ 1791.573358] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1791.578716] ? find_held_lock+0x36/0x1c0 [ 1791.582782] ? __lock_is_held+0xb5/0x140 [ 1791.586872] ? ___might_sleep+0x1ed/0x300 [ 1791.591028] ? arch_local_save_flags+0x40/0x40 [ 1791.595607] __should_failslab+0x124/0x180 [ 1791.599844] should_failslab+0x9/0x14 [ 1791.603687] kmem_cache_alloc+0x2be/0x730 [ 1791.607885] ? vmx_flush_tlb_gva+0x380/0x380 [ 1791.612295] ? ima_get_action+0x7e/0xa0 [ 1791.616269] ? mmu_topup_memory_caches+0xf7/0x390 [ 1791.621116] mmu_topup_memory_caches+0xf7/0x390 [ 1791.625795] kvm_mmu_load+0x21/0xfa0 [ 1791.629559] vcpu_enter_guest+0x3dbe/0x6380 [ 1791.633902] ? emulator_read_emulated+0x50/0x50 [ 1791.638615] ? vmx_vcpu_load+0xb06/0x1030 [ 1791.642782] ? vmx_write_tsc_offset+0x680/0x680 [ 1791.647456] ? graph_lock+0x170/0x170 [ 1791.651243] ? lock_downgrade+0x900/0x900 [ 1791.655379] ? check_preemption_disabled+0x48/0x280 [ 1791.660397] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1791.665952] ? check_preemption_disabled+0x48/0x280 [ 1791.670971] ? check_preemption_disabled+0x48/0x280 [ 1791.676016] ? __lock_is_held+0xb5/0x140 [ 1791.680084] ? lock_acquire+0x1ed/0x520 [ 1791.684051] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1791.689077] ? lock_release+0x970/0x970 [ 1791.693061] ? kvm_gen_update_masterclock+0x350/0x350 [ 1791.698251] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1791.702758] ? preempt_notifier_dec+0x20/0x20 [ 1791.707282] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1791.712130] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 03:56:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1791.717163] kvm_vcpu_ioctl+0x72b/0x1150 [ 1791.721236] ? kvm_vcpu_block+0x1030/0x1030 [ 1791.725547] ? find_held_lock+0x36/0x1c0 [ 1791.729700] ? __fget+0x4aa/0x740 [ 1791.733160] ? check_preemption_disabled+0x48/0x280 [ 1791.738212] ? kasan_check_read+0x11/0x20 [ 1791.742381] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1791.747687] ? rcu_bh_qs+0xc0/0xc0 [ 1791.751253] ? __fget+0x4d1/0x740 [ 1791.754729] ? ksys_dup3+0x680/0x680 [ 1791.758456] ? find_held_lock+0x36/0x1c0 [ 1791.762542] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1791.767482] ? kvm_vcpu_block+0x1030/0x1030 [ 1791.771804] do_vfs_ioctl+0x1de/0x1720 [ 1791.775713] ? __lock_is_held+0xb5/0x140 [ 1791.779768] ? ioctl_preallocate+0x300/0x300 [ 1791.784179] ? __fget_light+0x2e9/0x430 [ 1791.788145] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1791.793673] ? smack_file_ioctl+0x210/0x3c0 [ 1791.797995] ? fget_raw+0x20/0x20 [ 1791.801465] ? smack_file_lock+0x2e0/0x2e0 [ 1791.805700] ? __sb_end_write+0xd9/0x110 [ 1791.809752] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1791.815275] ? fput+0x130/0x1a0 [ 1791.818543] ? do_syscall_64+0x9a/0x820 [ 1791.822504] ? do_syscall_64+0x9a/0x820 [ 1791.826476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1791.832014] ? security_file_ioctl+0x94/0xc0 [ 1791.836426] ksys_ioctl+0xa9/0xd0 [ 1791.839888] __x64_sys_ioctl+0x73/0xb0 [ 1791.843780] do_syscall_64+0x1b9/0x820 [ 1791.847670] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1791.853056] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1791.857974] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1791.862828] ? trace_hardirqs_on_caller+0x310/0x310 [ 1791.867833] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1791.872839] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1791.877854] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1791.882705] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1791.887886] RIP: 0033:0x457569 [ 1791.891067] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1791.909956] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1791.917681] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1791.924955] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1791.932220] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1791.939490] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1791.946753] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:03 executing program 2 (fault-call:5 fault-nth:18): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1792.099960] FAULT_INJECTION: forcing a failure. [ 1792.099960] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.112034] CPU: 0 PID: 17308 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1792.119334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1792.128689] Call Trace: [ 1792.131355] dump_stack+0x1c4/0x2b6 [ 1792.134992] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1792.140209] ? __kernel_text_address+0xd/0x40 [ 1792.144711] ? unwind_get_return_address+0x61/0xa0 [ 1792.149652] should_fail.cold.4+0xa/0x17 [ 1792.153719] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1792.158831] ? save_stack+0xa9/0xd0 [ 1792.162474] ? graph_lock+0x170/0x170 [ 1792.166277] ? kasan_slab_alloc+0x12/0x20 [ 1792.170422] ? kmem_cache_alloc+0x12e/0x730 [ 1792.174757] ? mmu_topup_memory_caches+0xf7/0x390 [ 1792.179610] ? kvm_mmu_load+0x21/0xfa0 [ 1792.183512] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1792.188011] ? graph_lock+0x170/0x170 [ 1792.191816] ? ksys_ioctl+0xa9/0xd0 [ 1792.195443] ? __x64_sys_ioctl+0x73/0xb0 [ 1792.199491] ? do_syscall_64+0x1b9/0x820 [ 1792.203550] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1792.208927] ? find_held_lock+0x36/0x1c0 [ 1792.212981] ? __lock_is_held+0xb5/0x140 [ 1792.217040] ? ___might_sleep+0x1ed/0x300 [ 1792.221214] ? arch_local_save_flags+0x40/0x40 [ 1792.225807] __should_failslab+0x124/0x180 [ 1792.230050] should_failslab+0x9/0x14 [ 1792.233858] kmem_cache_alloc+0x2be/0x730 [ 1792.238008] ? vmx_flush_tlb_gva+0x380/0x380 [ 1792.242436] ? ima_get_action+0x7e/0xa0 [ 1792.246400] ? mmu_topup_memory_caches+0xf7/0x390 [ 1792.251233] mmu_topup_memory_caches+0xf7/0x390 [ 1792.255905] kvm_mmu_load+0x21/0xfa0 [ 1792.259655] vcpu_enter_guest+0x3dbe/0x6380 [ 1792.264026] ? emulator_read_emulated+0x50/0x50 [ 1792.268708] ? vmx_vcpu_load+0xb06/0x1030 [ 1792.272875] ? vmx_write_tsc_offset+0x680/0x680 [ 1792.277575] ? graph_lock+0x170/0x170 [ 1792.281386] ? lock_downgrade+0x900/0x900 [ 1792.285547] ? check_preemption_disabled+0x48/0x280 [ 1792.290568] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1792.296129] ? check_preemption_disabled+0x48/0x280 [ 1792.301159] ? check_preemption_disabled+0x48/0x280 [ 1792.306198] ? __lock_is_held+0xb5/0x140 [ 1792.310267] ? lock_acquire+0x1ed/0x520 [ 1792.314242] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1792.319274] ? lock_release+0x970/0x970 [ 1792.323251] ? kvm_gen_update_masterclock+0x350/0x350 [ 1792.328445] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1792.332949] ? preempt_notifier_dec+0x20/0x20 [ 1792.337459] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1792.342307] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1792.347319] kvm_vcpu_ioctl+0x72b/0x1150 [ 1792.351389] ? kvm_vcpu_block+0x1030/0x1030 [ 1792.355719] ? find_held_lock+0x36/0x1c0 [ 1792.359788] ? __fget+0x4aa/0x740 [ 1792.363233] ? check_preemption_disabled+0x48/0x280 [ 1792.368257] ? kasan_check_read+0x11/0x20 [ 1792.372406] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1792.377683] ? rcu_bh_qs+0xc0/0xc0 [ 1792.381233] ? __fget+0x4d1/0x740 [ 1792.384680] ? ksys_dup3+0x680/0x680 [ 1792.388394] ? find_held_lock+0x36/0x1c0 [ 1792.392449] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1792.397388] ? kvm_vcpu_block+0x1030/0x1030 [ 1792.401715] do_vfs_ioctl+0x1de/0x1720 [ 1792.405617] ? __lock_is_held+0xb5/0x140 [ 1792.409668] ? ioctl_preallocate+0x300/0x300 [ 1792.414068] ? __fget_light+0x2e9/0x430 [ 1792.418061] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1792.423602] ? smack_file_ioctl+0x210/0x3c0 [ 1792.427936] ? fget_raw+0x20/0x20 [ 1792.431382] ? smack_file_lock+0x2e0/0x2e0 [ 1792.435604] ? __sb_end_write+0xd9/0x110 [ 1792.439654] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1792.445189] ? fput+0x130/0x1a0 [ 1792.448489] ? do_syscall_64+0x9a/0x820 [ 1792.452465] ? do_syscall_64+0x9a/0x820 [ 1792.456444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1792.461984] ? security_file_ioctl+0x94/0xc0 [ 1792.466386] ksys_ioctl+0xa9/0xd0 [ 1792.469832] __x64_sys_ioctl+0x73/0xb0 [ 1792.473711] do_syscall_64+0x1b9/0x820 [ 1792.477605] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1792.482974] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1792.487906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1792.492745] ? trace_hardirqs_on_caller+0x310/0x310 [ 1792.497756] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1792.502772] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1792.507810] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1792.512677] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1792.517875] RIP: 0033:0x457569 [ 1792.521072] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1792.539967] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:03 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1792.547681] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1792.554949] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1792.562223] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1792.569493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1792.576747] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x8100]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:03 executing program 2 (fault-call:5 fault-nth:19): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1792.742528] FAULT_INJECTION: forcing a failure. [ 1792.742528] name failslab, interval 1, probability 0, space 0, times 0 [ 1792.754020] CPU: 1 PID: 17334 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1792.761300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1792.770648] Call Trace: [ 1792.773244] dump_stack+0x1c4/0x2b6 [ 1792.776875] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1792.782069] ? __kernel_text_address+0xd/0x40 [ 1792.786581] ? unwind_get_return_address+0x61/0xa0 [ 1792.791518] should_fail.cold.4+0xa/0x17 [ 1792.795586] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1792.800712] ? save_stack+0xa9/0xd0 [ 1792.804350] ? graph_lock+0x170/0x170 [ 1792.808151] ? kasan_slab_alloc+0x12/0x20 [ 1792.812307] ? kmem_cache_alloc+0x12e/0x730 [ 1792.816618] ? mmu_topup_memory_caches+0xf7/0x390 [ 1792.821448] ? kvm_mmu_load+0x21/0xfa0 [ 1792.825336] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1792.829841] ? graph_lock+0x170/0x170 [ 1792.833643] ? ksys_ioctl+0xa9/0xd0 [ 1792.837258] ? __x64_sys_ioctl+0x73/0xb0 [ 1792.841313] ? do_syscall_64+0x1b9/0x820 [ 1792.845373] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1792.850755] ? find_held_lock+0x36/0x1c0 [ 1792.854825] ? __lock_is_held+0xb5/0x140 [ 1792.858899] ? ___might_sleep+0x1ed/0x300 [ 1792.863056] ? arch_local_save_flags+0x40/0x40 [ 1792.867650] __should_failslab+0x124/0x180 [ 1792.871882] should_failslab+0x9/0x14 [ 1792.875682] kmem_cache_alloc+0x2be/0x730 [ 1792.879843] ? vmx_flush_tlb_gva+0x380/0x380 [ 1792.884254] ? ima_get_action+0x7e/0xa0 [ 1792.888228] ? mmu_topup_memory_caches+0xf7/0x390 [ 1792.893078] mmu_topup_memory_caches+0xf7/0x390 [ 1792.897752] kvm_mmu_load+0x21/0xfa0 [ 1792.901464] vcpu_enter_guest+0x3dbe/0x6380 [ 1792.905826] ? emulator_read_emulated+0x50/0x50 [ 1792.910515] ? vmx_vcpu_load+0xb06/0x1030 [ 1792.914673] ? vmx_write_tsc_offset+0x680/0x680 [ 1792.919339] ? graph_lock+0x170/0x170 [ 1792.923147] ? lock_downgrade+0x900/0x900 [ 1792.927302] ? check_preemption_disabled+0x48/0x280 [ 1792.932313] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1792.937853] ? check_preemption_disabled+0x48/0x280 [ 1792.942876] ? check_preemption_disabled+0x48/0x280 [ 1792.947917] ? __lock_is_held+0xb5/0x140 [ 1792.951996] ? lock_acquire+0x1ed/0x520 [ 1792.955969] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1792.960975] ? lock_release+0x970/0x970 [ 1792.964946] ? kvm_gen_update_masterclock+0x350/0x350 [ 1792.970129] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1792.974618] ? preempt_notifier_dec+0x20/0x20 [ 1792.979127] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1792.983986] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1792.989015] kvm_vcpu_ioctl+0x72b/0x1150 [ 1792.993080] ? kvm_vcpu_block+0x1030/0x1030 [ 1792.997424] ? find_held_lock+0x36/0x1c0 [ 1793.001498] ? __fget+0x4aa/0x740 [ 1793.004964] ? check_preemption_disabled+0x48/0x280 [ 1793.010000] ? kasan_check_read+0x11/0x20 [ 1793.014172] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1793.019441] ? rcu_bh_qs+0xc0/0xc0 [ 1793.022994] ? __fget+0x4d1/0x740 [ 1793.026456] ? ksys_dup3+0x680/0x680 [ 1793.030158] ? find_held_lock+0x36/0x1c0 [ 1793.034226] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1793.039176] ? kvm_vcpu_block+0x1030/0x1030 [ 1793.043506] do_vfs_ioctl+0x1de/0x1720 [ 1793.047399] ? __lock_is_held+0xb5/0x140 [ 1793.051467] ? ioctl_preallocate+0x300/0x300 [ 1793.055893] ? __fget_light+0x2e9/0x430 [ 1793.059893] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1793.065445] ? smack_file_ioctl+0x210/0x3c0 [ 1793.069765] ? fget_raw+0x20/0x20 [ 1793.073232] ? smack_file_lock+0x2e0/0x2e0 [ 1793.077470] ? __sb_end_write+0xd9/0x110 [ 1793.081523] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1793.087054] ? fput+0x130/0x1a0 [ 1793.090347] ? do_syscall_64+0x9a/0x820 [ 1793.094339] ? do_syscall_64+0x9a/0x820 [ 1793.098328] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1793.103870] ? security_file_ioctl+0x94/0xc0 [ 1793.108281] ksys_ioctl+0xa9/0xd0 [ 1793.111755] __x64_sys_ioctl+0x73/0xb0 [ 1793.115646] do_syscall_64+0x1b9/0x820 [ 1793.119532] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1793.124903] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1793.129842] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1793.134680] ? trace_hardirqs_on_caller+0x310/0x310 [ 1793.139710] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1793.144731] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1793.149762] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1793.154604] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1793.159789] RIP: 0033:0x457569 [ 1793.162994] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1793.181906] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1793.189617] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1793.196891] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1793.204157] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1793.211425] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1793.218698] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:04 executing program 2 (fault-call:5 fault-nth:20): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1793.330286] FAULT_INJECTION: forcing a failure. [ 1793.330286] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.341574] CPU: 0 PID: 17358 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1793.348848] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.358211] Call Trace: [ 1793.360795] dump_stack+0x1c4/0x2b6 [ 1793.364431] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1793.369626] ? __kernel_text_address+0xd/0x40 [ 1793.374112] ? unwind_get_return_address+0x61/0xa0 [ 1793.379051] should_fail.cold.4+0xa/0x17 [ 1793.383119] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1793.388231] ? save_stack+0xa9/0xd0 [ 1793.391873] ? graph_lock+0x170/0x170 [ 1793.395795] ? kasan_slab_alloc+0x12/0x20 [ 1793.399968] ? kmem_cache_alloc+0x12e/0x730 [ 1793.404288] ? mmu_topup_memory_caches+0xf7/0x390 [ 1793.409130] ? kvm_mmu_load+0x21/0xfa0 [ 1793.413032] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1793.417619] ? graph_lock+0x170/0x170 [ 1793.421409] ? ksys_ioctl+0xa9/0xd0 [ 1793.425034] ? __x64_sys_ioctl+0x73/0xb0 [ 1793.429104] ? do_syscall_64+0x1b9/0x820 [ 1793.433171] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1793.438545] ? find_held_lock+0x36/0x1c0 [ 1793.442614] ? __lock_is_held+0xb5/0x140 [ 1793.446687] ? ___might_sleep+0x1ed/0x300 [ 1793.450836] ? arch_local_save_flags+0x40/0x40 [ 1793.455433] __should_failslab+0x124/0x180 [ 1793.459676] should_failslab+0x9/0x14 [ 1793.463468] kmem_cache_alloc+0x2be/0x730 [ 1793.467625] ? vmx_flush_tlb_gva+0x380/0x380 [ 1793.472024] ? ima_get_action+0x7e/0xa0 [ 1793.476000] ? mmu_topup_memory_caches+0xf7/0x390 [ 1793.480849] mmu_topup_memory_caches+0xf7/0x390 [ 1793.485526] kvm_mmu_load+0x21/0xfa0 [ 1793.489268] vcpu_enter_guest+0x3dbe/0x6380 [ 1793.493602] ? emulator_read_emulated+0x50/0x50 [ 1793.498280] ? vmx_vcpu_load+0xb06/0x1030 [ 1793.502433] ? vmx_write_tsc_offset+0x680/0x680 [ 1793.507115] ? graph_lock+0x170/0x170 [ 1793.510914] ? lock_downgrade+0x900/0x900 [ 1793.515080] ? check_preemption_disabled+0x48/0x280 [ 1793.520105] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1793.525645] ? check_preemption_disabled+0x48/0x280 [ 1793.530683] ? check_preemption_disabled+0x48/0x280 [ 1793.535699] ? __lock_is_held+0xb5/0x140 [ 1793.539753] ? lock_acquire+0x1ed/0x520 [ 1793.543728] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1793.548747] ? lock_release+0x970/0x970 [ 1793.552715] ? kvm_gen_update_masterclock+0x350/0x350 [ 1793.557909] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1793.562428] ? preempt_notifier_dec+0x20/0x20 [ 1793.566950] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1793.571784] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1793.576798] kvm_vcpu_ioctl+0x72b/0x1150 [ 1793.580849] ? kvm_vcpu_block+0x1030/0x1030 [ 1793.585171] ? find_held_lock+0x36/0x1c0 [ 1793.589265] ? __fget+0x4aa/0x740 [ 1793.592720] ? check_preemption_disabled+0x48/0x280 [ 1793.597733] ? kasan_check_read+0x11/0x20 [ 1793.601871] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1793.607147] ? rcu_bh_qs+0xc0/0xc0 [ 1793.610720] ? __fget+0x4d1/0x740 [ 1793.614178] ? ksys_dup3+0x680/0x680 [ 1793.617884] ? find_held_lock+0x36/0x1c0 [ 1793.621960] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1793.626897] ? kvm_vcpu_block+0x1030/0x1030 [ 1793.631230] do_vfs_ioctl+0x1de/0x1720 [ 1793.635120] ? __lock_is_held+0xb5/0x140 [ 1793.639186] ? ioctl_preallocate+0x300/0x300 [ 1793.643602] ? __fget_light+0x2e9/0x430 [ 1793.647594] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1793.653137] ? smack_file_ioctl+0x210/0x3c0 [ 1793.657463] ? fget_raw+0x20/0x20 [ 1793.660933] ? smack_file_lock+0x2e0/0x2e0 [ 1793.665175] ? __sb_end_write+0xd9/0x110 [ 1793.669234] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1793.674757] ? fput+0x130/0x1a0 [ 1793.678040] ? do_syscall_64+0x9a/0x820 [ 1793.682020] ? do_syscall_64+0x9a/0x820 [ 1793.686000] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1793.691550] ? security_file_ioctl+0x94/0xc0 [ 1793.695964] ksys_ioctl+0xa9/0xd0 [ 1793.699410] __x64_sys_ioctl+0x73/0xb0 [ 1793.703298] do_syscall_64+0x1b9/0x820 [ 1793.707186] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1793.712545] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1793.717461] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1793.722309] ? trace_hardirqs_on_caller+0x310/0x310 [ 1793.727328] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1793.732490] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1793.737530] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1793.742394] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1793.747603] RIP: 0033:0x457569 [ 1793.750797] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1793.769699] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1793.777407] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1793.784672] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1793.791938] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1793.799223] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1793.806486] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:04 executing program 2 (fault-call:5 fault-nth:21): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1793.945955] FAULT_INJECTION: forcing a failure. [ 1793.945955] name failslab, interval 1, probability 0, space 0, times 0 [ 1793.957348] CPU: 1 PID: 17378 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1793.964634] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1793.964645] Call Trace: [ 1793.976601] dump_stack+0x1c4/0x2b6 [ 1793.980245] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1793.980264] ? __kernel_text_address+0xd/0x40 [ 1793.980283] ? unwind_get_return_address+0x61/0xa0 [ 1793.980310] should_fail.cold.4+0xa/0x17 [ 1793.980331] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1793.980349] ? save_stack+0xa9/0xd0 [ 1793.980367] ? graph_lock+0x170/0x170 [ 1793.980379] ? kasan_slab_alloc+0x12/0x20 [ 1793.980395] ? kmem_cache_alloc+0x12e/0x730 [ 1793.980416] ? mmu_topup_memory_caches+0xf7/0x390 [ 1794.024867] ? kvm_mmu_load+0x21/0xfa0 [ 1794.028757] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1794.033269] ? graph_lock+0x170/0x170 [ 1794.037093] ? ksys_ioctl+0xa9/0xd0 [ 1794.040723] ? __x64_sys_ioctl+0x73/0xb0 [ 1794.044774] ? do_syscall_64+0x1b9/0x820 [ 1794.048827] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1794.054227] ? find_held_lock+0x36/0x1c0 [ 1794.058280] ? __lock_is_held+0xb5/0x140 [ 1794.062341] ? ___might_sleep+0x1ed/0x300 [ 1794.066481] ? arch_local_save_flags+0x40/0x40 [ 1794.071060] __should_failslab+0x124/0x180 [ 1794.075298] should_failslab+0x9/0x14 [ 1794.079117] kmem_cache_alloc+0x2be/0x730 [ 1794.083267] ? vmx_flush_tlb_gva+0x380/0x380 [ 1794.087669] ? ima_get_action+0x7e/0xa0 [ 1794.091645] ? mmu_topup_memory_caches+0xf7/0x390 [ 1794.096480] mmu_topup_memory_caches+0xf7/0x390 [ 1794.101151] kvm_mmu_load+0x21/0xfa0 [ 1794.104876] vcpu_enter_guest+0x3dbe/0x6380 [ 1794.109213] ? emulator_read_emulated+0x50/0x50 [ 1794.113891] ? vmx_vcpu_load+0xb06/0x1030 [ 1794.118033] ? vmx_write_tsc_offset+0x680/0x680 [ 1794.122690] ? graph_lock+0x170/0x170 [ 1794.126547] ? lock_downgrade+0x900/0x900 [ 1794.130708] ? check_preemption_disabled+0x48/0x280 [ 1794.135736] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1794.141279] ? check_preemption_disabled+0x48/0x280 [ 1794.146284] ? check_preemption_disabled+0x48/0x280 [ 1794.151309] ? __lock_is_held+0xb5/0x140 [ 1794.155386] ? lock_acquire+0x1ed/0x520 [ 1794.159364] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1794.164390] ? lock_release+0x970/0x970 [ 1794.168367] ? kvm_gen_update_masterclock+0x350/0x350 [ 1794.173560] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1794.178066] ? preempt_notifier_dec+0x20/0x20 [ 1794.182587] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1794.187437] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1794.192477] kvm_vcpu_ioctl+0x72b/0x1150 [ 1794.196554] ? kvm_vcpu_block+0x1030/0x1030 [ 1794.200893] ? find_held_lock+0x36/0x1c0 [ 1794.200918] ? __fget+0x4aa/0x740 [ 1794.200952] ? check_preemption_disabled+0x48/0x280 [ 1794.200976] ? kasan_check_read+0x11/0x20 [ 1794.201000] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1794.222915] ? rcu_bh_qs+0xc0/0xc0 [ 1794.226478] ? __fget+0x4d1/0x740 [ 1794.229961] ? ksys_dup3+0x680/0x680 [ 1794.233690] ? find_held_lock+0x36/0x1c0 [ 1794.237779] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1794.242741] ? kvm_vcpu_block+0x1030/0x1030 [ 1794.247090] do_vfs_ioctl+0x1de/0x1720 [ 1794.250980] ? __lock_is_held+0xb5/0x140 [ 1794.255045] ? ioctl_preallocate+0x300/0x300 [ 1794.259444] ? __fget_light+0x2e9/0x430 [ 1794.263419] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1794.268970] ? smack_file_ioctl+0x210/0x3c0 [ 1794.273295] ? fget_raw+0x20/0x20 [ 1794.276758] ? smack_file_lock+0x2e0/0x2e0 [ 1794.280997] ? __sb_end_write+0xd9/0x110 [ 1794.285068] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1794.290619] ? fput+0x130/0x1a0 [ 1794.293904] ? do_syscall_64+0x9a/0x820 [ 1794.297878] ? do_syscall_64+0x9a/0x820 [ 1794.301856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1794.307400] ? security_file_ioctl+0x94/0xc0 [ 1794.311813] ksys_ioctl+0xa9/0xd0 [ 1794.315274] __x64_sys_ioctl+0x73/0xb0 [ 1794.319177] do_syscall_64+0x1b9/0x820 [ 1794.323077] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1794.328444] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1794.333361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1794.338213] ? trace_hardirqs_on_caller+0x310/0x310 [ 1794.343224] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1794.348243] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1794.353269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1794.358121] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1794.363302] RIP: 0033:0x457569 [ 1794.366494] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1794.385402] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1794.393123] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1794.400379] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1794.407650] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1794.414908] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1794.422173] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0xffffffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:06 executing program 2 (fault-call:5 fault-nth:22): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1795.081582] FAULT_INJECTION: forcing a failure. [ 1795.081582] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.093139] CPU: 1 PID: 17404 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1795.100427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.109769] Call Trace: [ 1795.112353] dump_stack+0x1c4/0x2b6 [ 1795.115987] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1795.121182] ? __kernel_text_address+0xd/0x40 [ 1795.125688] ? unwind_get_return_address+0x61/0xa0 [ 1795.130639] should_fail.cold.4+0xa/0x17 [ 1795.134701] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1795.139810] ? save_stack+0xa9/0xd0 [ 1795.143436] ? graph_lock+0x170/0x170 [ 1795.147235] ? kasan_slab_alloc+0x12/0x20 [ 1795.151387] ? kmem_cache_alloc+0x12e/0x730 [ 1795.155705] ? mmu_topup_memory_caches+0xf7/0x390 [ 1795.160537] ? kvm_mmu_load+0x21/0xfa0 [ 1795.164420] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1795.168905] ? graph_lock+0x170/0x170 [ 1795.172707] ? ksys_ioctl+0xa9/0xd0 [ 1795.176330] ? __x64_sys_ioctl+0x73/0xb0 [ 1795.180393] ? do_syscall_64+0x1b9/0x820 [ 1795.184452] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1795.189819] ? find_held_lock+0x36/0x1c0 [ 1795.193888] ? __lock_is_held+0xb5/0x140 [ 1795.197969] ? ___might_sleep+0x1ed/0x300 [ 1795.202137] ? arch_local_save_flags+0x40/0x40 [ 1795.206772] __should_failslab+0x124/0x180 [ 1795.211026] should_failslab+0x9/0x14 [ 1795.214830] kmem_cache_alloc+0x2be/0x730 [ 1795.218974] ? vmx_flush_tlb_gva+0x380/0x380 [ 1795.223396] ? ima_get_action+0x7e/0xa0 [ 1795.227378] ? mmu_topup_memory_caches+0xf7/0x390 [ 1795.232213] mmu_topup_memory_caches+0xf7/0x390 [ 1795.236874] kvm_mmu_load+0x21/0xfa0 [ 1795.240594] vcpu_enter_guest+0x3dbe/0x6380 [ 1795.244940] ? emulator_read_emulated+0x50/0x50 [ 1795.249636] ? vmx_vcpu_load+0xb06/0x1030 [ 1795.253792] ? vmx_write_tsc_offset+0x680/0x680 [ 1795.258453] ? graph_lock+0x170/0x170 [ 1795.262253] ? lock_downgrade+0x900/0x900 [ 1795.266420] ? check_preemption_disabled+0x48/0x280 [ 1795.271460] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1795.277013] ? check_preemption_disabled+0x48/0x280 [ 1795.282022] ? check_preemption_disabled+0x48/0x280 [ 1795.287036] ? __lock_is_held+0xb5/0x140 [ 1795.291110] ? lock_acquire+0x1ed/0x520 [ 1795.295085] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1795.300107] ? lock_release+0x970/0x970 [ 1795.304083] ? kvm_gen_update_masterclock+0x350/0x350 [ 1795.309281] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1795.313783] ? preempt_notifier_dec+0x20/0x20 [ 1795.318289] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1795.323142] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1795.328170] kvm_vcpu_ioctl+0x72b/0x1150 [ 1795.332225] ? kvm_vcpu_block+0x1030/0x1030 [ 1795.336558] ? find_held_lock+0x36/0x1c0 [ 1795.340648] ? __fget+0x4aa/0x740 [ 1795.344114] ? check_preemption_disabled+0x48/0x280 [ 1795.349136] ? kasan_check_read+0x11/0x20 [ 1795.353293] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1795.358590] ? rcu_bh_qs+0xc0/0xc0 [ 1795.362128] ? __fget+0x4d1/0x740 [ 1795.365575] ? ksys_dup3+0x680/0x680 [ 1795.369287] ? find_held_lock+0x36/0x1c0 [ 1795.373374] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1795.378310] ? kvm_vcpu_block+0x1030/0x1030 [ 1795.382640] do_vfs_ioctl+0x1de/0x1720 [ 1795.386532] ? __lock_is_held+0xb5/0x140 [ 1795.390597] ? ioctl_preallocate+0x300/0x300 [ 1795.395035] ? __fget_light+0x2e9/0x430 [ 1795.399012] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1795.404557] ? smack_file_ioctl+0x210/0x3c0 [ 1795.408866] ? fget_raw+0x20/0x20 [ 1795.412308] ? smack_file_lock+0x2e0/0x2e0 [ 1795.416621] ? __sb_end_write+0xd9/0x110 [ 1795.420689] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1795.426231] ? fput+0x130/0x1a0 [ 1795.429515] ? do_syscall_64+0x9a/0x820 [ 1795.433492] ? do_syscall_64+0x9a/0x820 [ 1795.437458] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1795.442993] ? security_file_ioctl+0x94/0xc0 [ 1795.447407] ksys_ioctl+0xa9/0xd0 [ 1795.450864] __x64_sys_ioctl+0x73/0xb0 [ 1795.454741] do_syscall_64+0x1b9/0x820 [ 1795.458635] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1795.464004] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1795.468957] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1795.473791] ? trace_hardirqs_on_caller+0x310/0x310 [ 1795.478810] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1795.483816] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1795.488828] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1795.493670] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1795.498848] RIP: 0033:0x457569 [ 1795.502033] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1795.520934] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:06 executing program 2 (fault-call:5 fault-nth:23): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1795.528634] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1795.535894] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1795.543201] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1795.550466] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1795.557751] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1795.633050] FAULT_INJECTION: forcing a failure. [ 1795.633050] name failslab, interval 1, probability 0, space 0, times 0 [ 1795.644572] CPU: 1 PID: 17430 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1795.651856] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1795.661217] Call Trace: [ 1795.663799] dump_stack+0x1c4/0x2b6 [ 1795.667432] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1795.672637] ? __kernel_text_address+0xd/0x40 [ 1795.677150] ? unwind_get_return_address+0x61/0xa0 [ 1795.682104] should_fail.cold.4+0xa/0x17 [ 1795.686187] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1795.691293] ? save_stack+0xa9/0xd0 [ 1795.694930] ? graph_lock+0x170/0x170 [ 1795.698733] ? kasan_slab_alloc+0x12/0x20 [ 1795.702877] ? kmem_cache_alloc+0x12e/0x730 [ 1795.707204] ? mmu_topup_memory_caches+0xf7/0x390 [ 1795.712035] ? kvm_mmu_load+0x21/0xfa0 [ 1795.715942] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1795.720455] ? graph_lock+0x170/0x170 [ 1795.724257] ? ksys_ioctl+0xa9/0xd0 [ 1795.727880] ? __x64_sys_ioctl+0x73/0xb0 [ 1795.732195] ? do_syscall_64+0x1b9/0x820 [ 1795.736251] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1795.741619] ? find_held_lock+0x36/0x1c0 [ 1795.745687] ? __lock_is_held+0xb5/0x140 [ 1795.749785] ? ___might_sleep+0x1ed/0x300 [ 1795.753956] ? arch_local_save_flags+0x40/0x40 [ 1795.758568] __should_failslab+0x124/0x180 [ 1795.762822] should_failslab+0x9/0x14 [ 1795.766641] kmem_cache_alloc+0x2be/0x730 [ 1795.770792] ? vmx_flush_tlb_gva+0x380/0x380 [ 1795.775217] ? ima_get_action+0x7e/0xa0 [ 1795.779209] ? mmu_topup_memory_caches+0xf7/0x390 [ 1795.784070] mmu_topup_memory_caches+0xf7/0x390 [ 1795.788941] kvm_mmu_load+0x21/0xfa0 [ 1795.792683] vcpu_enter_guest+0x3dbe/0x6380 [ 1795.797042] ? emulator_read_emulated+0x50/0x50 [ 1795.801729] ? vmx_vcpu_load+0xb06/0x1030 [ 1795.805885] ? vmx_write_tsc_offset+0x680/0x680 [ 1795.810552] ? graph_lock+0x170/0x170 [ 1795.814353] ? lock_downgrade+0x900/0x900 [ 1795.818503] ? check_preemption_disabled+0x48/0x280 [ 1795.823522] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1795.829073] ? check_preemption_disabled+0x48/0x280 [ 1795.834097] ? check_preemption_disabled+0x48/0x280 [ 1795.839128] ? __lock_is_held+0xb5/0x140 [ 1795.843196] ? lock_acquire+0x1ed/0x520 [ 1795.847168] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1795.852188] ? lock_release+0x970/0x970 [ 1795.856172] ? kvm_gen_update_masterclock+0x350/0x350 [ 1795.861381] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1795.865882] ? preempt_notifier_dec+0x20/0x20 [ 1795.870397] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1795.875260] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1795.880279] kvm_vcpu_ioctl+0x72b/0x1150 [ 1795.884330] ? kvm_vcpu_block+0x1030/0x1030 [ 1795.888662] ? find_held_lock+0x36/0x1c0 [ 1795.892737] ? __fget+0x4aa/0x740 [ 1795.896208] ? check_preemption_disabled+0x48/0x280 [ 1795.901252] ? kasan_check_read+0x11/0x20 [ 1795.905431] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1795.910730] ? rcu_bh_qs+0xc0/0xc0 [ 1795.914298] ? __fget+0x4d1/0x740 [ 1795.917777] ? ksys_dup3+0x680/0x680 [ 1795.921500] ? find_held_lock+0x36/0x1c0 [ 1795.925583] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1795.930532] ? kvm_vcpu_block+0x1030/0x1030 [ 1795.934870] do_vfs_ioctl+0x1de/0x1720 [ 1795.938776] ? __lock_is_held+0xb5/0x140 [ 1795.938798] ? ioctl_preallocate+0x300/0x300 [ 1795.938816] ? __fget_light+0x2e9/0x430 [ 1795.938835] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1795.938854] ? smack_file_ioctl+0x210/0x3c0 [ 1795.938868] ? fget_raw+0x20/0x20 [ 1795.938885] ? smack_file_lock+0x2e0/0x2e0 [ 1795.938903] ? __sb_end_write+0xd9/0x110 [ 1795.947383] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1795.947398] ? fput+0x130/0x1a0 03:56:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1795.947416] ? do_syscall_64+0x9a/0x820 [ 1795.947433] ? do_syscall_64+0x9a/0x820 [ 1795.947454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1795.947471] ? security_file_ioctl+0x94/0xc0 [ 1795.947490] ksys_ioctl+0xa9/0xd0 [ 1796.003122] __x64_sys_ioctl+0x73/0xb0 [ 1796.007029] do_syscall_64+0x1b9/0x820 [ 1796.010943] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1796.016330] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1796.021274] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1796.026133] ? trace_hardirqs_on_caller+0x310/0x310 [ 1796.031170] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1796.036206] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1796.036233] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1796.036246] RIP: 0033:0x457569 [ 1796.036263] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1796.036272] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1796.036295] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 03:56:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1796.046314] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1796.046324] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1796.046333] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1796.046343] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:07 executing program 2 (fault-call:5 fault-nth:24): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1796.225732] FAULT_INJECTION: forcing a failure. [ 1796.225732] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.237350] CPU: 0 PID: 17468 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1796.244616] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.253955] Call Trace: [ 1796.256543] dump_stack+0x1c4/0x2b6 [ 1796.260178] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1796.265363] ? __kernel_text_address+0xd/0x40 [ 1796.269848] ? unwind_get_return_address+0x61/0xa0 [ 1796.274785] should_fail.cold.4+0xa/0x17 [ 1796.278842] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1796.283957] ? save_stack+0xa9/0xd0 [ 1796.287590] ? graph_lock+0x170/0x170 [ 1796.291376] ? kasan_slab_alloc+0x12/0x20 [ 1796.295513] ? kmem_cache_alloc+0x12e/0x730 [ 1796.299837] ? mmu_topup_memory_caches+0xf7/0x390 [ 1796.304678] ? kvm_mmu_load+0x21/0xfa0 [ 1796.308565] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1796.313075] ? graph_lock+0x170/0x170 [ 1796.317008] ? ksys_ioctl+0xa9/0xd0 [ 1796.320645] ? __x64_sys_ioctl+0x73/0xb0 [ 1796.324708] ? do_syscall_64+0x1b9/0x820 [ 1796.328768] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1796.334136] ? find_held_lock+0x36/0x1c0 [ 1796.338211] ? __lock_is_held+0xb5/0x140 [ 1796.342284] ? ___might_sleep+0x1ed/0x300 [ 1796.346437] ? arch_local_save_flags+0x40/0x40 [ 1796.351038] __should_failslab+0x124/0x180 [ 1796.355275] should_failslab+0x9/0x14 [ 1796.359090] kmem_cache_alloc+0x2be/0x730 [ 1796.363247] ? vmx_flush_tlb_gva+0x380/0x380 [ 1796.367661] ? ima_get_action+0x7e/0xa0 [ 1796.371640] ? mmu_topup_memory_caches+0xf7/0x390 [ 1796.376490] mmu_topup_memory_caches+0xf7/0x390 [ 1796.381153] kvm_mmu_load+0x21/0xfa0 [ 1796.384872] vcpu_enter_guest+0x3dbe/0x6380 [ 1796.389229] ? emulator_read_emulated+0x50/0x50 [ 1796.393918] ? vmx_vcpu_load+0xb06/0x1030 [ 1796.398084] ? vmx_write_tsc_offset+0x680/0x680 [ 1796.402751] ? graph_lock+0x170/0x170 [ 1796.406559] ? lock_downgrade+0x900/0x900 [ 1796.410734] ? check_preemption_disabled+0x48/0x280 [ 1796.415770] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1796.421324] ? check_preemption_disabled+0x48/0x280 [ 1796.426338] ? check_preemption_disabled+0x48/0x280 [ 1796.431362] ? __lock_is_held+0xb5/0x140 [ 1796.435442] ? lock_acquire+0x1ed/0x520 [ 1796.439419] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1796.444438] ? lock_release+0x970/0x970 [ 1796.448416] ? kvm_gen_update_masterclock+0x350/0x350 [ 1796.453605] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1796.458108] ? preempt_notifier_dec+0x20/0x20 [ 1796.462622] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1796.467468] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1796.472491] kvm_vcpu_ioctl+0x72b/0x1150 [ 1796.476560] ? kvm_vcpu_block+0x1030/0x1030 [ 1796.480874] ? find_held_lock+0x36/0x1c0 [ 1796.484959] ? __fget+0x4aa/0x740 [ 1796.488430] ? check_preemption_disabled+0x48/0x280 [ 1796.493465] ? kasan_check_read+0x11/0x20 [ 1796.497631] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1796.502919] ? rcu_bh_qs+0xc0/0xc0 [ 1796.506476] ? __fget+0x4d1/0x740 [ 1796.509960] ? ksys_dup3+0x680/0x680 [ 1796.513698] ? find_held_lock+0x36/0x1c0 [ 1796.517763] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1796.522699] ? kvm_vcpu_block+0x1030/0x1030 [ 1796.527011] do_vfs_ioctl+0x1de/0x1720 [ 1796.530896] ? __lock_is_held+0xb5/0x140 [ 1796.534973] ? ioctl_preallocate+0x300/0x300 [ 1796.539385] ? __fget_light+0x2e9/0x430 [ 1796.543363] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1796.548905] ? smack_file_ioctl+0x210/0x3c0 [ 1796.553248] ? fget_raw+0x20/0x20 [ 1796.556700] ? smack_file_lock+0x2e0/0x2e0 [ 1796.560951] ? __sb_end_write+0xd9/0x110 [ 1796.565034] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1796.570578] ? fput+0x130/0x1a0 [ 1796.573870] ? do_syscall_64+0x9a/0x820 [ 1796.577867] ? do_syscall_64+0x9a/0x820 [ 1796.581858] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1796.587425] ? security_file_ioctl+0x94/0xc0 [ 1796.591849] ksys_ioctl+0xa9/0xd0 [ 1796.595302] __x64_sys_ioctl+0x73/0xb0 [ 1796.599218] do_syscall_64+0x1b9/0x820 [ 1796.603120] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1796.608487] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1796.613404] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1796.618251] ? trace_hardirqs_on_caller+0x310/0x310 [ 1796.623271] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1796.628290] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1796.633312] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1796.638162] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1796.643358] RIP: 0033:0x457569 [ 1796.646552] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1796.665451] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1796.673149] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1796.680436] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1796.687692] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1796.694956] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1796.702399] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:07 executing program 2 (fault-call:5 fault-nth:25): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1796.811018] FAULT_INJECTION: forcing a failure. [ 1796.811018] name failslab, interval 1, probability 0, space 0, times 0 [ 1796.822794] CPU: 1 PID: 17486 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1796.830081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1796.839435] Call Trace: [ 1796.842023] dump_stack+0x1c4/0x2b6 [ 1796.845644] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1796.850823] ? __kernel_text_address+0xd/0x40 [ 1796.855333] ? unwind_get_return_address+0x61/0xa0 [ 1796.860258] should_fail.cold.4+0xa/0x17 [ 1796.864313] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1796.869414] ? save_stack+0xa9/0xd0 [ 1796.873056] ? graph_lock+0x170/0x170 [ 1796.876871] ? kasan_slab_alloc+0x12/0x20 [ 1796.881029] ? kmem_cache_alloc+0x12e/0x730 [ 1796.885355] ? mmu_topup_memory_caches+0xf7/0x390 [ 1796.890186] ? kvm_mmu_load+0x21/0xfa0 [ 1796.894065] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1796.898548] ? graph_lock+0x170/0x170 [ 1796.902339] ? ksys_ioctl+0xa9/0xd0 [ 1796.905955] ? __x64_sys_ioctl+0x73/0xb0 [ 1796.910005] ? do_syscall_64+0x1b9/0x820 [ 1796.914060] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1796.919422] ? find_held_lock+0x36/0x1c0 [ 1796.923486] ? __lock_is_held+0xb5/0x140 [ 1796.927579] ? ___might_sleep+0x1ed/0x300 [ 1796.931734] ? arch_local_save_flags+0x40/0x40 [ 1796.936311] __should_failslab+0x124/0x180 [ 1796.940549] should_failslab+0x9/0x14 [ 1796.944353] kmem_cache_alloc+0x2be/0x730 [ 1796.948492] ? vmx_flush_tlb_gva+0x380/0x380 [ 1796.952893] ? ima_get_action+0x7e/0xa0 [ 1796.956865] ? mmu_topup_memory_caches+0xf7/0x390 [ 1796.961720] mmu_topup_memory_caches+0xf7/0x390 [ 1796.966400] kvm_mmu_load+0x21/0xfa0 [ 1796.970113] vcpu_enter_guest+0x3dbe/0x6380 [ 1796.974454] ? emulator_read_emulated+0x50/0x50 [ 1796.979144] ? vmx_vcpu_load+0xb06/0x1030 [ 1796.983296] ? vmx_write_tsc_offset+0x680/0x680 [ 1796.987954] ? graph_lock+0x170/0x170 [ 1796.991758] ? lock_downgrade+0x900/0x900 [ 1796.995936] ? check_preemption_disabled+0x48/0x280 [ 1797.000972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1797.006522] ? check_preemption_disabled+0x48/0x280 03:56:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x1f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1797.011551] ? check_preemption_disabled+0x48/0x280 [ 1797.016587] ? __lock_is_held+0xb5/0x140 [ 1797.020664] ? lock_acquire+0x1ed/0x520 [ 1797.024658] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1797.024681] ? lock_release+0x970/0x970 [ 1797.024709] ? kvm_gen_update_masterclock+0x350/0x350 [ 1797.033685] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1797.033709] ? preempt_notifier_dec+0x20/0x20 [ 1797.033739] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1797.033755] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1797.033785] kvm_vcpu_ioctl+0x72b/0x1150 03:56:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1797.061854] ? kvm_vcpu_block+0x1030/0x1030 [ 1797.066181] ? find_held_lock+0x36/0x1c0 [ 1797.070249] ? __fget+0x4aa/0x740 [ 1797.073726] ? check_preemption_disabled+0x48/0x280 [ 1797.078757] ? kasan_check_read+0x11/0x20 [ 1797.082919] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1797.088219] ? rcu_bh_qs+0xc0/0xc0 [ 1797.091779] ? __fget+0x4d1/0x740 [ 1797.095259] ? ksys_dup3+0x680/0x680 [ 1797.098983] ? find_held_lock+0x36/0x1c0 [ 1797.099010] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1797.099039] ? kvm_vcpu_block+0x1030/0x1030 [ 1797.108019] do_vfs_ioctl+0x1de/0x1720 [ 1797.108036] ? __lock_is_held+0xb5/0x140 [ 1797.108057] ? ioctl_preallocate+0x300/0x300 [ 1797.108075] ? __fget_light+0x2e9/0x430 [ 1797.108093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1797.108114] ? smack_file_ioctl+0x210/0x3c0 [ 1797.138576] ? fget_raw+0x20/0x20 [ 1797.142060] ? smack_file_lock+0x2e0/0x2e0 [ 1797.146308] ? __sb_end_write+0xd9/0x110 [ 1797.150391] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1797.155950] ? fput+0x130/0x1a0 03:56:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1797.159251] ? do_syscall_64+0x9a/0x820 [ 1797.163246] ? do_syscall_64+0x9a/0x820 [ 1797.167232] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1797.172781] ? security_file_ioctl+0x94/0xc0 [ 1797.177201] ksys_ioctl+0xa9/0xd0 [ 1797.180672] __x64_sys_ioctl+0x73/0xb0 [ 1797.184581] do_syscall_64+0x1b9/0x820 [ 1797.188485] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1797.193862] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1797.193879] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1797.193899] ? trace_hardirqs_on_caller+0x310/0x310 [ 1797.193916] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1797.193947] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1797.193969] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1797.193992] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1797.194005] RIP: 0033:0x457569 [ 1797.194021] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1797.194030] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:08 executing program 2 (fault-call:5 fault-nth:26): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1797.194047] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1797.194057] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1797.194071] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1797.208839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1797.208850] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1797.384731] FAULT_INJECTION: forcing a failure. [ 1797.384731] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.396135] CPU: 0 PID: 17525 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1797.403407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1797.412764] Call Trace: [ 1797.415364] dump_stack+0x1c4/0x2b6 [ 1797.418995] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1797.424242] ? __kernel_text_address+0xd/0x40 [ 1797.428754] ? unwind_get_return_address+0x61/0xa0 [ 1797.433709] should_fail.cold.4+0xa/0x17 [ 1797.437778] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1797.442900] ? save_stack+0xa9/0xd0 [ 1797.446539] ? graph_lock+0x170/0x170 [ 1797.450347] ? kasan_slab_alloc+0x12/0x20 [ 1797.454498] ? kmem_cache_alloc+0x12e/0x730 [ 1797.458831] ? mmu_topup_memory_caches+0xf7/0x390 [ 1797.463689] ? kvm_mmu_load+0x21/0xfa0 [ 1797.467577] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1797.472061] ? graph_lock+0x170/0x170 [ 1797.475859] ? ksys_ioctl+0xa9/0xd0 [ 1797.479515] ? __x64_sys_ioctl+0x73/0xb0 [ 1797.483579] ? do_syscall_64+0x1b9/0x820 [ 1797.487648] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1797.493033] ? find_held_lock+0x36/0x1c0 [ 1797.497103] ? __lock_is_held+0xb5/0x140 [ 1797.501173] ? ___might_sleep+0x1ed/0x300 [ 1797.505325] ? arch_local_save_flags+0x40/0x40 [ 1797.509931] __should_failslab+0x124/0x180 [ 1797.514170] should_failslab+0x9/0x14 [ 1797.517996] kmem_cache_alloc+0x2be/0x730 [ 1797.522154] ? vmx_flush_tlb_gva+0x380/0x380 [ 1797.526610] ? ima_get_action+0x7e/0xa0 [ 1797.530587] ? mmu_topup_memory_caches+0xf7/0x390 [ 1797.535430] mmu_topup_memory_caches+0xf7/0x390 [ 1797.540106] kvm_mmu_load+0x21/0xfa0 [ 1797.543831] vcpu_enter_guest+0x3dbe/0x6380 [ 1797.548164] ? emulator_read_emulated+0x50/0x50 [ 1797.552848] ? vmx_vcpu_load+0xb06/0x1030 [ 1797.557001] ? vmx_write_tsc_offset+0x680/0x680 [ 1797.561681] ? graph_lock+0x170/0x170 [ 1797.565483] ? lock_downgrade+0x900/0x900 [ 1797.569621] ? check_preemption_disabled+0x48/0x280 [ 1797.574628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1797.580178] ? check_preemption_disabled+0x48/0x280 [ 1797.585209] ? check_preemption_disabled+0x48/0x280 [ 1797.590267] ? __lock_is_held+0xb5/0x140 [ 1797.594362] ? lock_acquire+0x1ed/0x520 [ 1797.598517] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1797.603575] ? lock_release+0x970/0x970 [ 1797.607578] ? kvm_gen_update_masterclock+0x350/0x350 [ 1797.612795] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1797.617296] ? preempt_notifier_dec+0x20/0x20 [ 1797.621805] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1797.626651] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1797.631665] kvm_vcpu_ioctl+0x72b/0x1150 [ 1797.635716] ? kvm_vcpu_block+0x1030/0x1030 [ 1797.640046] ? find_held_lock+0x36/0x1c0 [ 1797.644132] ? __fget+0x4aa/0x740 [ 1797.647596] ? check_preemption_disabled+0x48/0x280 [ 1797.652621] ? kasan_check_read+0x11/0x20 [ 1797.656770] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1797.662036] ? rcu_bh_qs+0xc0/0xc0 [ 1797.665573] ? __fget+0x4d1/0x740 [ 1797.669021] ? ksys_dup3+0x680/0x680 [ 1797.672742] ? find_held_lock+0x36/0x1c0 [ 1797.676829] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1797.681766] ? kvm_vcpu_block+0x1030/0x1030 [ 1797.686103] do_vfs_ioctl+0x1de/0x1720 [ 1797.689992] ? __lock_is_held+0xb5/0x140 [ 1797.694056] ? ioctl_preallocate+0x300/0x300 [ 1797.698464] ? __fget_light+0x2e9/0x430 [ 1797.702465] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1797.708032] ? smack_file_ioctl+0x210/0x3c0 [ 1797.712361] ? fget_raw+0x20/0x20 [ 1797.715803] ? smack_file_lock+0x2e0/0x2e0 [ 1797.720047] ? __sb_end_write+0xd9/0x110 [ 1797.724125] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1797.729808] ? fput+0x130/0x1a0 [ 1797.733077] ? do_syscall_64+0x9a/0x820 [ 1797.737052] ? do_syscall_64+0x9a/0x820 [ 1797.741033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1797.746561] ? security_file_ioctl+0x94/0xc0 [ 1797.750979] ksys_ioctl+0xa9/0xd0 [ 1797.754445] __x64_sys_ioctl+0x73/0xb0 [ 1797.758324] do_syscall_64+0x1b9/0x820 [ 1797.762215] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1797.767582] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1797.772514] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1797.777361] ? trace_hardirqs_on_caller+0x310/0x310 [ 1797.782385] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1797.787394] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1797.792229] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1797.797407] RIP: 0033:0x457569 [ 1797.800595] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1797.819681] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1797.827393] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 03:56:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1797.834658] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1797.841937] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1797.849208] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1797.856479] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:09 executing program 2 (fault-call:5 fault-nth:27): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1797.965492] FAULT_INJECTION: forcing a failure. [ 1797.965492] name failslab, interval 1, probability 0, space 0, times 0 [ 1797.977128] CPU: 0 PID: 17544 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1797.984404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1797.993757] Call Trace: [ 1797.996352] dump_stack+0x1c4/0x2b6 [ 1797.999988] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1798.005185] ? __kernel_text_address+0xd/0x40 [ 1798.009676] ? unwind_get_return_address+0x61/0xa0 [ 1798.014618] should_fail.cold.4+0xa/0x17 [ 1798.018711] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1798.023817] ? save_stack+0xa9/0xd0 [ 1798.027462] ? graph_lock+0x170/0x170 [ 1798.031303] ? kasan_slab_alloc+0x12/0x20 [ 1798.035456] ? kmem_cache_alloc+0x12e/0x730 [ 1798.039777] ? mmu_topup_memory_caches+0xf7/0x390 [ 1798.044620] ? kvm_mmu_load+0x21/0xfa0 [ 1798.048511] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1798.053021] ? graph_lock+0x170/0x170 [ 1798.056828] ? ksys_ioctl+0xa9/0xd0 [ 1798.060465] ? __x64_sys_ioctl+0x73/0xb0 [ 1798.064528] ? do_syscall_64+0x1b9/0x820 [ 1798.068594] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1798.073967] ? find_held_lock+0x36/0x1c0 [ 1798.078032] ? __lock_is_held+0xb5/0x140 [ 1798.082103] ? ___might_sleep+0x1ed/0x300 [ 1798.086243] ? arch_local_save_flags+0x40/0x40 [ 1798.090822] __should_failslab+0x124/0x180 [ 1798.095057] should_failslab+0x9/0x14 [ 1798.098879] kmem_cache_alloc+0x2be/0x730 [ 1798.103038] ? vmx_flush_tlb_gva+0x380/0x380 [ 1798.107450] ? ima_get_action+0x7e/0xa0 [ 1798.111434] ? mmu_topup_memory_caches+0xf7/0x390 [ 1798.116287] mmu_topup_memory_caches+0xf7/0x390 [ 1798.120976] kvm_mmu_load+0x21/0xfa0 [ 1798.124723] vcpu_enter_guest+0x3dbe/0x6380 [ 1798.129062] ? emulator_read_emulated+0x50/0x50 [ 1798.133741] ? vmx_vcpu_load+0xb06/0x1030 [ 1798.137897] ? vmx_write_tsc_offset+0x680/0x680 [ 1798.142587] ? graph_lock+0x170/0x170 [ 1798.146406] ? lock_downgrade+0x900/0x900 [ 1798.150555] ? check_preemption_disabled+0x48/0x280 [ 1798.155611] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1798.161161] ? check_preemption_disabled+0x48/0x280 [ 1798.166209] ? check_preemption_disabled+0x48/0x280 [ 1798.171252] ? __lock_is_held+0xb5/0x140 [ 1798.175334] ? lock_acquire+0x1ed/0x520 [ 1798.179321] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1798.184362] ? lock_release+0x970/0x970 [ 1798.188327] ? kvm_gen_update_masterclock+0x350/0x350 [ 1798.193506] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1798.197994] ? preempt_notifier_dec+0x20/0x20 [ 1798.202501] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1798.207340] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1798.212375] kvm_vcpu_ioctl+0x72b/0x1150 [ 1798.216443] ? kvm_vcpu_block+0x1030/0x1030 [ 1798.220766] ? find_held_lock+0x36/0x1c0 [ 1798.224838] ? __fget+0x4aa/0x740 [ 1798.228310] ? check_preemption_disabled+0x48/0x280 [ 1798.233336] ? kasan_check_read+0x11/0x20 [ 1798.237487] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1798.242766] ? rcu_bh_qs+0xc0/0xc0 [ 1798.246313] ? __fget+0x4d1/0x740 [ 1798.249774] ? ksys_dup3+0x680/0x680 [ 1798.253508] ? find_held_lock+0x36/0x1c0 [ 1798.257580] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1798.262515] ? kvm_vcpu_block+0x1030/0x1030 [ 1798.266839] do_vfs_ioctl+0x1de/0x1720 [ 1798.270748] ? __lock_is_held+0xb5/0x140 [ 1798.274817] ? ioctl_preallocate+0x300/0x300 [ 1798.279228] ? __fget_light+0x2e9/0x430 [ 1798.283211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1798.288751] ? smack_file_ioctl+0x210/0x3c0 [ 1798.293070] ? fget_raw+0x20/0x20 [ 1798.296521] ? smack_file_lock+0x2e0/0x2e0 [ 1798.300746] ? __sb_end_write+0xd9/0x110 [ 1798.304811] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1798.310359] ? fput+0x130/0x1a0 [ 1798.313641] ? do_syscall_64+0x9a/0x820 [ 1798.317604] ? do_syscall_64+0x9a/0x820 [ 1798.321569] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1798.327186] ? security_file_ioctl+0x94/0xc0 [ 1798.331590] ksys_ioctl+0xa9/0xd0 [ 1798.335059] __x64_sys_ioctl+0x73/0xb0 [ 1798.338952] do_syscall_64+0x1b9/0x820 [ 1798.342855] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1798.348245] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1798.353166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1798.358010] ? trace_hardirqs_on_caller+0x310/0x310 [ 1798.363031] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1798.368052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1798.372900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1798.378090] RIP: 0033:0x457569 [ 1798.381286] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1798.400179] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1798.407910] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 03:56:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1798.415189] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1798.422452] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1798.429712] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1798.436991] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:09 executing program 2 (fault-call:5 fault-nth:28): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1798.611071] FAULT_INJECTION: forcing a failure. [ 1798.611071] name failslab, interval 1, probability 0, space 0, times 0 [ 1798.622534] CPU: 1 PID: 17570 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1798.629803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1798.639150] Call Trace: [ 1798.641749] dump_stack+0x1c4/0x2b6 [ 1798.645370] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1798.650559] ? __kernel_text_address+0xd/0x40 [ 1798.655074] ? unwind_get_return_address+0x61/0xa0 [ 1798.660014] should_fail.cold.4+0xa/0x17 [ 1798.664085] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1798.669192] ? save_stack+0xa9/0xd0 [ 1798.672832] ? graph_lock+0x170/0x170 [ 1798.676650] ? kasan_slab_alloc+0x12/0x20 [ 1798.680814] ? kmem_cache_alloc+0x12e/0x730 [ 1798.685136] ? mmu_topup_memory_caches+0xf7/0x390 [ 1798.689984] ? kvm_mmu_load+0x21/0xfa0 [ 1798.693872] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1798.698376] ? graph_lock+0x170/0x170 [ 1798.702168] ? ksys_ioctl+0xa9/0xd0 [ 1798.705787] ? __x64_sys_ioctl+0x73/0xb0 [ 1798.709864] ? do_syscall_64+0x1b9/0x820 [ 1798.713963] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1798.719322] ? find_held_lock+0x36/0x1c0 [ 1798.723372] ? __lock_is_held+0xb5/0x140 [ 1798.727443] ? ___might_sleep+0x1ed/0x300 [ 1798.731589] ? arch_local_save_flags+0x40/0x40 [ 1798.736165] __should_failslab+0x124/0x180 [ 1798.740393] should_failslab+0x9/0x14 [ 1798.744185] kmem_cache_alloc+0x2be/0x730 [ 1798.748335] ? vmx_flush_tlb_gva+0x380/0x380 [ 1798.752755] ? ima_get_action+0x7e/0xa0 [ 1798.756745] ? mmu_topup_memory_caches+0xf7/0x390 [ 1798.761610] mmu_topup_memory_caches+0xf7/0x390 [ 1798.766289] kvm_mmu_load+0x21/0xfa0 [ 1798.770017] vcpu_enter_guest+0x3dbe/0x6380 [ 1798.774360] ? emulator_read_emulated+0x50/0x50 [ 1798.779038] ? vmx_vcpu_load+0xb06/0x1030 [ 1798.783236] ? vmx_write_tsc_offset+0x680/0x680 [ 1798.787932] ? graph_lock+0x170/0x170 [ 1798.791727] ? lock_downgrade+0x900/0x900 [ 1798.795868] ? check_preemption_disabled+0x48/0x280 [ 1798.800878] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1798.806439] ? check_preemption_disabled+0x48/0x280 03:56:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1798.811457] ? check_preemption_disabled+0x48/0x280 [ 1798.816488] ? __lock_is_held+0xb5/0x140 [ 1798.820567] ? lock_acquire+0x1ed/0x520 [ 1798.824548] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1798.829584] ? lock_release+0x970/0x970 [ 1798.833572] ? kvm_gen_update_masterclock+0x350/0x350 [ 1798.838774] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1798.843280] ? preempt_notifier_dec+0x20/0x20 [ 1798.847800] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1798.852662] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1798.857715] kvm_vcpu_ioctl+0x72b/0x1150 [ 1798.861782] ? kvm_vcpu_block+0x1030/0x1030 [ 1798.866107] ? find_held_lock+0x36/0x1c0 [ 1798.870160] ? __fget+0x4aa/0x740 [ 1798.873613] ? check_preemption_disabled+0x48/0x280 [ 1798.878637] ? kasan_check_read+0x11/0x20 [ 1798.882784] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1798.888074] ? rcu_bh_qs+0xc0/0xc0 [ 1798.891637] ? __fget+0x4d1/0x740 [ 1798.895112] ? ksys_dup3+0x680/0x680 [ 1798.898841] ? find_held_lock+0x36/0x1c0 [ 1798.902934] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1798.907873] ? kvm_vcpu_block+0x1030/0x1030 [ 1798.912191] do_vfs_ioctl+0x1de/0x1720 [ 1798.916072] ? __lock_is_held+0xb5/0x140 [ 1798.920139] ? ioctl_preallocate+0x300/0x300 [ 1798.924558] ? __fget_light+0x2e9/0x430 [ 1798.928542] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1798.934087] ? smack_file_ioctl+0x210/0x3c0 [ 1798.938415] ? fget_raw+0x20/0x20 [ 1798.941864] ? smack_file_lock+0x2e0/0x2e0 [ 1798.946102] ? __sb_end_write+0xd9/0x110 [ 1798.950169] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1798.955713] ? fput+0x130/0x1a0 [ 1798.958985] ? do_syscall_64+0x9a/0x820 [ 1798.962970] ? do_syscall_64+0x9a/0x820 [ 1798.966977] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1798.972530] ? security_file_ioctl+0x94/0xc0 [ 1798.976964] ksys_ioctl+0xa9/0xd0 [ 1798.980442] __x64_sys_ioctl+0x73/0xb0 [ 1798.984337] do_syscall_64+0x1b9/0x820 [ 1798.988225] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1798.993593] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1798.998533] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1799.003397] ? trace_hardirqs_on_caller+0x310/0x310 [ 1799.008416] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1799.013433] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1799.018461] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1799.023311] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1799.028487] RIP: 0033:0x457569 [ 1799.031674] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1799.053035] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:10 executing program 2 (fault-call:5 fault-nth:29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1799.060757] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1799.068022] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1799.075276] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1799.082533] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1799.089794] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1799.164393] FAULT_INJECTION: forcing a failure. [ 1799.164393] name failslab, interval 1, probability 0, space 0, times 0 [ 1799.176194] CPU: 1 PID: 17594 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1799.183484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1799.192836] Call Trace: [ 1799.195430] dump_stack+0x1c4/0x2b6 [ 1799.199064] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1799.204258] ? __kernel_text_address+0xd/0x40 [ 1799.208749] ? unwind_get_return_address+0x61/0xa0 [ 1799.213711] should_fail.cold.4+0xa/0x17 [ 1799.217778] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1799.222881] ? save_stack+0xa9/0xd0 [ 1799.226533] ? graph_lock+0x170/0x170 [ 1799.230336] ? kasan_slab_alloc+0x12/0x20 [ 1799.234493] ? kmem_cache_alloc+0x12e/0x730 [ 1799.238816] ? mmu_topup_memory_caches+0xf7/0x390 [ 1799.243658] ? kvm_mmu_load+0x21/0xfa0 [ 1799.247545] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1799.252054] ? graph_lock+0x170/0x170 [ 1799.255857] ? ksys_ioctl+0xa9/0xd0 [ 1799.259474] ? __x64_sys_ioctl+0x73/0xb0 [ 1799.263528] ? do_syscall_64+0x1b9/0x820 [ 1799.267575] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1799.272956] ? find_held_lock+0x36/0x1c0 [ 1799.277024] ? __lock_is_held+0xb5/0x140 [ 1799.281142] ? ___might_sleep+0x1ed/0x300 [ 1799.285295] ? arch_local_save_flags+0x40/0x40 [ 1799.289871] __should_failslab+0x124/0x180 [ 1799.294110] should_failslab+0x9/0x14 [ 1799.297931] kmem_cache_alloc+0x2be/0x730 [ 1799.302089] ? vmx_flush_tlb_gva+0x380/0x380 [ 1799.306502] ? ima_get_action+0x7e/0xa0 [ 1799.310468] ? mmu_topup_memory_caches+0xf7/0x390 [ 1799.315327] mmu_topup_memory_caches+0xf7/0x390 [ 1799.320014] kvm_mmu_load+0x21/0xfa0 [ 1799.323780] vcpu_enter_guest+0x3dbe/0x6380 [ 1799.328118] ? emulator_read_emulated+0x50/0x50 [ 1799.332805] ? vmx_vcpu_load+0xb06/0x1030 [ 1799.336960] ? vmx_write_tsc_offset+0x680/0x680 [ 1799.341628] ? graph_lock+0x170/0x170 [ 1799.345430] ? lock_downgrade+0x900/0x900 [ 1799.349577] ? check_preemption_disabled+0x48/0x280 [ 1799.354608] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1799.360155] ? check_preemption_disabled+0x48/0x280 [ 1799.365185] ? check_preemption_disabled+0x48/0x280 [ 1799.370207] ? __lock_is_held+0xb5/0x140 [ 1799.374303] ? lock_acquire+0x1ed/0x520 [ 1799.378277] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1799.383301] ? lock_release+0x970/0x970 [ 1799.387276] ? kvm_gen_update_masterclock+0x350/0x350 [ 1799.392468] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1799.396952] ? preempt_notifier_dec+0x20/0x20 [ 1799.401538] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1799.406379] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1799.411410] kvm_vcpu_ioctl+0x72b/0x1150 [ 1799.415462] ? kvm_vcpu_block+0x1030/0x1030 [ 1799.419784] ? find_held_lock+0x36/0x1c0 [ 1799.423854] ? __fget+0x4aa/0x740 [ 1799.427319] ? check_preemption_disabled+0x48/0x280 [ 1799.432355] ? kasan_check_read+0x11/0x20 [ 1799.436507] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1799.441789] ? rcu_bh_qs+0xc0/0xc0 [ 1799.445342] ? __fget+0x4d1/0x740 [ 1799.448790] ? ksys_dup3+0x680/0x680 [ 1799.452492] ? find_held_lock+0x36/0x1c0 [ 1799.456559] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1799.461494] ? kvm_vcpu_block+0x1030/0x1030 [ 1799.465809] do_vfs_ioctl+0x1de/0x1720 [ 1799.469684] ? __lock_is_held+0xb5/0x140 [ 1799.473753] ? ioctl_preallocate+0x300/0x300 [ 1799.478165] ? __fget_light+0x2e9/0x430 [ 1799.482137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1799.487664] ? smack_file_ioctl+0x210/0x3c0 [ 1799.491980] ? fget_raw+0x20/0x20 [ 1799.495434] ? smack_file_lock+0x2e0/0x2e0 [ 1799.499662] ? __sb_end_write+0xd9/0x110 [ 1799.503722] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1799.509271] ? fput+0x130/0x1a0 [ 1799.512551] ? do_syscall_64+0x9a/0x820 [ 1799.516519] ? do_syscall_64+0x9a/0x820 [ 1799.520493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1799.526031] ? security_file_ioctl+0x94/0xc0 [ 1799.530431] ksys_ioctl+0xa9/0xd0 [ 1799.533875] __x64_sys_ioctl+0x73/0xb0 [ 1799.537762] do_syscall_64+0x1b9/0x820 [ 1799.541654] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1799.547018] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1799.551945] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1799.556782] ? trace_hardirqs_on_caller+0x310/0x310 [ 1799.561799] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1799.566829] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1799.571850] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1799.576685] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1799.581871] RIP: 0033:0x457569 [ 1799.585073] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1799.604096] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1799.611797] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1799.619058] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1799.626336] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1799.633605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1799.640865] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:11 executing program 2 (fault-call:5 fault-nth:30): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:11 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1800.206949] FAULT_INJECTION: forcing a failure. [ 1800.206949] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.218364] CPU: 0 PID: 17626 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1800.225638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.234975] Call Trace: [ 1800.237561] dump_stack+0x1c4/0x2b6 [ 1800.241202] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1800.246383] ? __kernel_text_address+0xd/0x40 [ 1800.250867] ? unwind_get_return_address+0x61/0xa0 [ 1800.255792] should_fail.cold.4+0xa/0x17 [ 1800.259858] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1800.264967] ? save_stack+0xa9/0xd0 [ 1800.268586] ? graph_lock+0x170/0x170 [ 1800.272387] ? kasan_slab_alloc+0x12/0x20 [ 1800.276555] ? kmem_cache_alloc+0x12e/0x730 [ 1800.280867] ? mmu_topup_memory_caches+0xf7/0x390 [ 1800.285699] ? kvm_mmu_load+0x21/0xfa0 [ 1800.289588] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1800.294088] ? graph_lock+0x170/0x170 [ 1800.297901] ? ksys_ioctl+0xa9/0xd0 [ 1800.301533] ? __x64_sys_ioctl+0x73/0xb0 [ 1800.305592] ? do_syscall_64+0x1b9/0x820 [ 1800.309656] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1800.315030] ? find_held_lock+0x36/0x1c0 [ 1800.319111] ? __lock_is_held+0xb5/0x140 [ 1800.323167] ? ___might_sleep+0x1ed/0x300 [ 1800.327305] ? arch_local_save_flags+0x40/0x40 [ 1800.331883] __should_failslab+0x124/0x180 [ 1800.336111] should_failslab+0x9/0x14 [ 1800.339900] kmem_cache_alloc+0x2be/0x730 [ 1800.344048] ? vmx_flush_tlb_gva+0x380/0x380 [ 1800.348448] ? ima_get_action+0x7e/0xa0 [ 1800.352424] ? mmu_topup_memory_caches+0xf7/0x390 [ 1800.357271] mmu_topup_memory_caches+0xf7/0x390 [ 1800.361956] kvm_mmu_load+0x21/0xfa0 [ 1800.365667] vcpu_enter_guest+0x3dbe/0x6380 [ 1800.369982] ? emulator_read_emulated+0x50/0x50 [ 1800.374641] ? vmx_vcpu_load+0xb06/0x1030 [ 1800.378780] ? vmx_write_tsc_offset+0x680/0x680 [ 1800.383436] ? graph_lock+0x170/0x170 [ 1800.387238] ? lock_downgrade+0x900/0x900 [ 1800.391399] ? check_preemption_disabled+0x48/0x280 [ 1800.396418] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1800.401966] ? check_preemption_disabled+0x48/0x280 [ 1800.406995] ? check_preemption_disabled+0x48/0x280 [ 1800.412052] ? __lock_is_held+0xb5/0x140 [ 1800.416119] ? lock_acquire+0x1ed/0x520 [ 1800.420085] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1800.425092] ? lock_release+0x970/0x970 [ 1800.429063] ? kvm_gen_update_masterclock+0x350/0x350 [ 1800.434256] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1800.438737] ? preempt_notifier_dec+0x20/0x20 [ 1800.443238] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1800.448086] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1800.453116] kvm_vcpu_ioctl+0x72b/0x1150 [ 1800.457193] ? kvm_vcpu_block+0x1030/0x1030 [ 1800.461538] ? find_held_lock+0x36/0x1c0 [ 1800.465598] ? __fget+0x4aa/0x740 [ 1800.469044] ? check_preemption_disabled+0x48/0x280 [ 1800.474065] ? kasan_check_read+0x11/0x20 [ 1800.478215] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1800.483482] ? rcu_bh_qs+0xc0/0xc0 [ 1800.487035] ? __fget+0x4d1/0x740 [ 1800.490488] ? ksys_dup3+0x680/0x680 [ 1800.494206] ? find_held_lock+0x36/0x1c0 [ 1800.498274] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1800.503217] ? kvm_vcpu_block+0x1030/0x1030 [ 1800.507553] do_vfs_ioctl+0x1de/0x1720 [ 1800.511443] ? __lock_is_held+0xb5/0x140 [ 1800.515499] ? ioctl_preallocate+0x300/0x300 [ 1800.519934] ? __fget_light+0x2e9/0x430 [ 1800.523934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1800.529592] ? smack_file_ioctl+0x210/0x3c0 [ 1800.533934] ? fget_raw+0x20/0x20 [ 1800.537403] ? smack_file_lock+0x2e0/0x2e0 [ 1800.541630] ? __sb_end_write+0xd9/0x110 [ 1800.545683] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1800.551222] ? fput+0x130/0x1a0 [ 1800.554509] ? do_syscall_64+0x9a/0x820 [ 1800.558481] ? do_syscall_64+0x9a/0x820 [ 1800.562443] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1800.567972] ? security_file_ioctl+0x94/0xc0 [ 1800.572382] ksys_ioctl+0xa9/0xd0 [ 1800.575852] __x64_sys_ioctl+0x73/0xb0 [ 1800.579755] do_syscall_64+0x1b9/0x820 [ 1800.583653] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1800.589019] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1800.593949] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1800.598916] ? trace_hardirqs_on_caller+0x310/0x310 [ 1800.603940] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1800.608965] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1800.614003] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1800.618849] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1800.624038] RIP: 0033:0x457569 [ 1800.627233] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1800.646132] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:11 executing program 2 (fault-call:5 fault-nth:31): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1800.653827] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1800.661094] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1800.668370] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1800.675625] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1800.682881] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1800.761204] FAULT_INJECTION: forcing a failure. [ 1800.761204] name failslab, interval 1, probability 0, space 0, times 0 [ 1800.772887] CPU: 0 PID: 17645 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1800.780161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1800.789508] Call Trace: [ 1800.792117] dump_stack+0x1c4/0x2b6 [ 1800.795747] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1800.800955] ? __kernel_text_address+0xd/0x40 [ 1800.805454] ? unwind_get_return_address+0x61/0xa0 [ 1800.810378] should_fail.cold.4+0xa/0x17 [ 1800.814439] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1800.819547] ? save_stack+0xa9/0xd0 [ 1800.823166] ? graph_lock+0x170/0x170 [ 1800.826955] ? kasan_slab_alloc+0x12/0x20 [ 1800.831103] ? kmem_cache_alloc+0x12e/0x730 [ 1800.835422] ? mmu_topup_memory_caches+0xf7/0x390 [ 1800.840266] ? kvm_mmu_load+0x21/0xfa0 [ 1800.844140] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1800.848623] ? graph_lock+0x170/0x170 [ 1800.852413] ? ksys_ioctl+0xa9/0xd0 [ 1800.856036] ? __x64_sys_ioctl+0x73/0xb0 [ 1800.860100] ? do_syscall_64+0x1b9/0x820 [ 1800.864160] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1800.869530] ? find_held_lock+0x36/0x1c0 [ 1800.873595] ? __lock_is_held+0xb5/0x140 [ 1800.877668] ? ___might_sleep+0x1ed/0x300 [ 1800.881830] ? arch_local_save_flags+0x40/0x40 [ 1800.886440] __should_failslab+0x124/0x180 [ 1800.890676] should_failslab+0x9/0x14 [ 1800.894468] kmem_cache_alloc+0x2be/0x730 [ 1800.898606] ? vmx_flush_tlb_gva+0x380/0x380 [ 1800.903019] ? ima_get_action+0x7e/0xa0 [ 1800.906982] ? mmu_topup_memory_caches+0xf7/0x390 [ 1800.911819] mmu_topup_memory_caches+0xf7/0x390 [ 1800.916523] kvm_mmu_load+0x21/0xfa0 [ 1800.920246] vcpu_enter_guest+0x3dbe/0x6380 [ 1800.924576] ? emulator_read_emulated+0x50/0x50 [ 1800.929265] ? vmx_vcpu_load+0xb06/0x1030 [ 1800.933422] ? vmx_write_tsc_offset+0x680/0x680 [ 1800.938105] ? graph_lock+0x170/0x170 [ 1800.941907] ? lock_downgrade+0x900/0x900 [ 1800.946068] ? check_preemption_disabled+0x48/0x280 [ 1800.951086] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1800.956614] ? check_preemption_disabled+0x48/0x280 [ 1800.961623] ? check_preemption_disabled+0x48/0x280 [ 1800.966630] ? __lock_is_held+0xb5/0x140 [ 1800.970681] ? lock_acquire+0x1ed/0x520 [ 1800.974653] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1800.979669] ? lock_release+0x970/0x970 [ 1800.983632] ? kvm_gen_update_masterclock+0x350/0x350 [ 1800.988813] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1800.993324] ? preempt_notifier_dec+0x20/0x20 [ 1800.997817] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1801.002655] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1801.007668] kvm_vcpu_ioctl+0x72b/0x1150 [ 1801.011731] ? kvm_vcpu_block+0x1030/0x1030 [ 1801.016076] ? find_held_lock+0x36/0x1c0 [ 1801.020137] ? __fget+0x4aa/0x740 [ 1801.023581] ? check_preemption_disabled+0x48/0x280 [ 1801.028600] ? kasan_check_read+0x11/0x20 [ 1801.032749] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1801.038014] ? rcu_bh_qs+0xc0/0xc0 [ 1801.041546] ? __fget+0x4d1/0x740 [ 1801.044989] ? ksys_dup3+0x680/0x680 [ 1801.048689] ? find_held_lock+0x36/0x1c0 [ 1801.052749] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1801.057685] ? kvm_vcpu_block+0x1030/0x1030 [ 1801.062027] do_vfs_ioctl+0x1de/0x1720 [ 1801.065921] ? __lock_is_held+0xb5/0x140 [ 1801.069999] ? ioctl_preallocate+0x300/0x300 [ 1801.074411] ? __fget_light+0x2e9/0x430 [ 1801.078376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1801.083918] ? smack_file_ioctl+0x210/0x3c0 [ 1801.088261] ? fget_raw+0x20/0x20 [ 1801.091717] ? smack_file_lock+0x2e0/0x2e0 [ 1801.095962] ? __sb_end_write+0xd9/0x110 [ 1801.100026] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1801.105548] ? fput+0x130/0x1a0 [ 1801.108832] ? do_syscall_64+0x9a/0x820 [ 1801.112808] ? do_syscall_64+0x9a/0x820 [ 1801.116789] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1801.122315] ? security_file_ioctl+0x94/0xc0 [ 1801.126728] ksys_ioctl+0xa9/0xd0 [ 1801.130187] __x64_sys_ioctl+0x73/0xb0 [ 1801.134086] do_syscall_64+0x1b9/0x820 [ 1801.137978] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1801.143359] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1801.148302] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1801.153136] ? trace_hardirqs_on_caller+0x310/0x310 [ 1801.158152] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1801.163171] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1801.168184] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1801.173033] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1801.178211] RIP: 0033:0x457569 [ 1801.181400] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1801.200302] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1801.208013] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1801.215269] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1801.222524] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1801.229795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1801.237048] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:12 executing program 2 (fault-call:5 fault-nth:32): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1801.382942] FAULT_INJECTION: forcing a failure. [ 1801.382942] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.394321] CPU: 0 PID: 17670 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1801.401604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1801.410972] Call Trace: [ 1801.413567] dump_stack+0x1c4/0x2b6 [ 1801.417186] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1801.422376] ? __kernel_text_address+0xd/0x40 [ 1801.426885] ? unwind_get_return_address+0x61/0xa0 [ 1801.431829] should_fail.cold.4+0xa/0x17 [ 1801.435880] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1801.440994] ? save_stack+0xa9/0xd0 [ 1801.444629] ? graph_lock+0x170/0x170 [ 1801.448442] ? kasan_slab_alloc+0x12/0x20 [ 1801.452604] ? kmem_cache_alloc+0x12e/0x730 [ 1801.456912] ? mmu_topup_memory_caches+0xf7/0x390 [ 1801.461750] ? kvm_mmu_load+0x21/0xfa0 [ 1801.465634] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1801.470141] ? graph_lock+0x170/0x170 [ 1801.473961] ? ksys_ioctl+0xa9/0xd0 [ 1801.477596] ? __x64_sys_ioctl+0x73/0xb0 [ 1801.481651] ? do_syscall_64+0x1b9/0x820 [ 1801.485708] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1801.491070] ? find_held_lock+0x36/0x1c0 [ 1801.495147] ? __lock_is_held+0xb5/0x140 [ 1801.499224] ? ___might_sleep+0x1ed/0x300 [ 1801.503376] ? arch_local_save_flags+0x40/0x40 [ 1801.507965] __should_failslab+0x124/0x180 [ 1801.512207] should_failslab+0x9/0x14 [ 1801.516015] kmem_cache_alloc+0x2be/0x730 [ 1801.520180] ? vmx_flush_tlb_gva+0x380/0x380 [ 1801.524610] ? mmu_topup_memory_caches+0xf7/0x390 [ 1801.529457] mmu_topup_memory_caches+0xf7/0x390 [ 1801.534118] kvm_mmu_load+0x21/0xfa0 [ 1801.537844] vcpu_enter_guest+0x3dbe/0x6380 [ 1801.542210] ? emulator_read_emulated+0x50/0x50 [ 1801.546885] ? vmx_vcpu_load+0xb06/0x1030 [ 1801.551023] ? vmx_write_tsc_offset+0x680/0x680 [ 1801.555685] ? graph_lock+0x170/0x170 [ 1801.559494] ? lock_downgrade+0x900/0x900 [ 1801.563661] ? check_preemption_disabled+0x48/0x280 [ 1801.568684] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1801.574244] ? check_preemption_disabled+0x48/0x280 [ 1801.579264] ? check_preemption_disabled+0x48/0x280 [ 1801.584305] ? __lock_is_held+0xb5/0x140 [ 1801.588370] ? lock_acquire+0x1ed/0x520 [ 1801.592343] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1801.597619] ? lock_release+0x970/0x970 [ 1801.601591] ? kvm_gen_update_masterclock+0x350/0x350 [ 1801.606794] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1801.611299] ? preempt_notifier_dec+0x20/0x20 [ 1801.615828] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1801.620705] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1801.625748] kvm_vcpu_ioctl+0x72b/0x1150 [ 1801.629810] ? kvm_vcpu_block+0x1030/0x1030 [ 1801.634136] ? find_held_lock+0x36/0x1c0 [ 1801.638217] ? __fget+0x4aa/0x740 [ 1801.641716] ? check_preemption_disabled+0x48/0x280 [ 1801.646741] ? kasan_check_read+0x11/0x20 [ 1801.650939] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1801.656225] ? rcu_bh_qs+0xc0/0xc0 [ 1801.659782] ? __fget+0x4d1/0x740 [ 1801.663246] ? ksys_dup3+0x680/0x680 [ 1801.666968] ? find_held_lock+0x36/0x1c0 [ 1801.671041] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1801.675969] ? kvm_vcpu_block+0x1030/0x1030 [ 1801.680305] do_vfs_ioctl+0x1de/0x1720 [ 1801.684214] ? __lock_is_held+0xb5/0x140 [ 1801.688284] ? ioctl_preallocate+0x300/0x300 [ 1801.692698] ? __fget_light+0x2e9/0x430 [ 1801.696666] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1801.702233] ? smack_file_ioctl+0x210/0x3c0 [ 1801.706555] ? fget_raw+0x20/0x20 [ 1801.710009] ? smack_file_lock+0x2e0/0x2e0 [ 1801.714257] ? __sb_end_write+0xd9/0x110 [ 1801.718337] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1801.723881] ? fput+0x130/0x1a0 [ 1801.727166] ? do_syscall_64+0x9a/0x820 [ 1801.731267] ? do_syscall_64+0x9a/0x820 [ 1801.735239] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1801.740777] ? security_file_ioctl+0x94/0xc0 [ 1801.745193] ksys_ioctl+0xa9/0xd0 [ 1801.748649] __x64_sys_ioctl+0x73/0xb0 [ 1801.752540] do_syscall_64+0x1b9/0x820 [ 1801.756429] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1801.761795] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1801.766728] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1801.771561] ? trace_hardirqs_on_caller+0x310/0x310 [ 1801.776575] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1801.781591] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1801.786614] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1801.791479] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1801.796673] RIP: 0033:0x457569 [ 1801.799875] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1801.818837] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1801.826537] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 03:56:12 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:12 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1801.833804] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1801.841073] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1801.848329] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1801.855593] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:13 executing program 2 (fault-call:5 fault-nth:33): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1801.982516] FAULT_INJECTION: forcing a failure. [ 1801.982516] name failslab, interval 1, probability 0, space 0, times 0 [ 1801.993977] CPU: 1 PID: 17687 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1802.001245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1802.010587] Call Trace: [ 1802.013182] dump_stack+0x1c4/0x2b6 [ 1802.016804] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1802.021997] ? __kernel_text_address+0xd/0x40 [ 1802.026508] ? unwind_get_return_address+0x61/0xa0 [ 1802.031444] should_fail.cold.4+0xa/0x17 [ 1802.035509] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1802.040614] ? save_stack+0xa9/0xd0 [ 1802.044240] ? graph_lock+0x170/0x170 [ 1802.048026] ? kasan_slab_alloc+0x12/0x20 [ 1802.052165] ? kmem_cache_alloc+0x12e/0x730 [ 1802.056489] ? mmu_topup_memory_caches+0xf7/0x390 [ 1802.061333] ? kvm_mmu_load+0x21/0xfa0 [ 1802.065217] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1802.069729] ? graph_lock+0x170/0x170 [ 1802.073533] ? ksys_ioctl+0xa9/0xd0 [ 1802.077147] ? __x64_sys_ioctl+0x73/0xb0 [ 1802.081201] ? do_syscall_64+0x1b9/0x820 [ 1802.085255] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1802.090644] ? find_held_lock+0x36/0x1c0 [ 1802.094738] ? __lock_is_held+0xb5/0x140 [ 1802.098795] ? ___might_sleep+0x1ed/0x300 [ 1802.102958] ? arch_local_save_flags+0x40/0x40 [ 1802.107552] __should_failslab+0x124/0x180 [ 1802.111790] should_failslab+0x9/0x14 [ 1802.115600] kmem_cache_alloc+0x2be/0x730 [ 1802.119751] ? vmx_flush_tlb_gva+0x380/0x380 [ 1802.124160] ? ima_get_action+0x7e/0xa0 [ 1802.128136] ? mmu_topup_memory_caches+0xf7/0x390 [ 1802.132972] mmu_topup_memory_caches+0xf7/0x390 [ 1802.137662] kvm_mmu_load+0x21/0xfa0 [ 1802.141461] vcpu_enter_guest+0x3dbe/0x6380 [ 1802.145780] ? emulator_read_emulated+0x50/0x50 [ 1802.150454] ? vmx_vcpu_load+0xb06/0x1030 [ 1802.154609] ? vmx_write_tsc_offset+0x680/0x680 [ 1802.159288] ? graph_lock+0x170/0x170 [ 1802.163098] ? lock_downgrade+0x900/0x900 [ 1802.167251] ? check_preemption_disabled+0x48/0x280 [ 1802.172256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.177799] ? check_preemption_disabled+0x48/0x280 [ 1802.182816] ? check_preemption_disabled+0x48/0x280 [ 1802.187830] ? __lock_is_held+0xb5/0x140 [ 1802.191893] ? lock_acquire+0x1ed/0x520 [ 1802.195889] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1802.200937] ? lock_release+0x970/0x970 [ 1802.204903] ? kvm_gen_update_masterclock+0x350/0x350 [ 1802.210093] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1802.214574] ? preempt_notifier_dec+0x20/0x20 [ 1802.219079] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1802.223942] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1802.228969] kvm_vcpu_ioctl+0x72b/0x1150 [ 1802.233020] ? kvm_vcpu_block+0x1030/0x1030 [ 1802.237383] ? find_held_lock+0x36/0x1c0 [ 1802.241469] ? __fget+0x4aa/0x740 [ 1802.244937] ? check_preemption_disabled+0x48/0x280 [ 1802.249973] ? kasan_check_read+0x11/0x20 [ 1802.254128] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1802.259407] ? rcu_bh_qs+0xc0/0xc0 [ 1802.262961] ? __fget+0x4d1/0x740 [ 1802.266417] ? ksys_dup3+0x680/0x680 [ 1802.270126] ? find_held_lock+0x36/0x1c0 [ 1802.274201] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1802.279149] ? kvm_vcpu_block+0x1030/0x1030 [ 1802.283482] do_vfs_ioctl+0x1de/0x1720 [ 1802.287375] ? __lock_is_held+0xb5/0x140 [ 1802.291445] ? ioctl_preallocate+0x300/0x300 [ 1802.295867] ? __fget_light+0x2e9/0x430 [ 1802.299857] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.305409] ? smack_file_ioctl+0x210/0x3c0 [ 1802.305424] ? fget_raw+0x20/0x20 [ 1802.305441] ? smack_file_lock+0x2e0/0x2e0 [ 1802.305460] ? __sb_end_write+0xd9/0x110 [ 1802.313229] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1802.313243] ? fput+0x130/0x1a0 [ 1802.313263] ? do_syscall_64+0x9a/0x820 [ 1802.334289] ? do_syscall_64+0x9a/0x820 [ 1802.338268] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1802.343808] ? security_file_ioctl+0x94/0xc0 [ 1802.348231] ksys_ioctl+0xa9/0xd0 [ 1802.351709] __x64_sys_ioctl+0x73/0xb0 [ 1802.355614] do_syscall_64+0x1b9/0x820 [ 1802.359507] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1802.364865] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1802.369791] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1802.374640] ? trace_hardirqs_on_caller+0x310/0x310 [ 1802.379645] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1802.384649] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1802.389670] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1802.394523] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1802.399704] RIP: 0033:0x457569 [ 1802.402883] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1802.421773] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1802.429487] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1802.436752] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1802.444024] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1802.451287] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1802.458556] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x1f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:14 executing program 2 (fault-call:5 fault-nth:34): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:14 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1803.209883] FAULT_INJECTION: forcing a failure. [ 1803.209883] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.221450] CPU: 1 PID: 17718 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1803.228746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1803.238104] Call Trace: [ 1803.240685] dump_stack+0x1c4/0x2b6 [ 1803.244314] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1803.249495] ? __kernel_text_address+0xd/0x40 [ 1803.254002] ? unwind_get_return_address+0x61/0xa0 [ 1803.258941] should_fail.cold.4+0xa/0x17 [ 1803.262995] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1803.268086] ? save_stack+0xa9/0xd0 [ 1803.271711] ? graph_lock+0x170/0x170 [ 1803.275497] ? kasan_slab_alloc+0x12/0x20 [ 1803.279641] ? kmem_cache_alloc+0x12e/0x730 [ 1803.283966] ? mmu_topup_memory_caches+0xf7/0x390 [ 1803.288795] ? kvm_mmu_load+0x21/0xfa0 [ 1803.292678] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1803.297182] ? graph_lock+0x170/0x170 [ 1803.300986] ? ksys_ioctl+0xa9/0xd0 [ 1803.304610] ? __x64_sys_ioctl+0x73/0xb0 [ 1803.308687] ? do_syscall_64+0x1b9/0x820 [ 1803.312745] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1803.318102] ? find_held_lock+0x36/0x1c0 [ 1803.322155] ? __lock_is_held+0xb5/0x140 [ 1803.326211] ? ___might_sleep+0x1ed/0x300 [ 1803.330359] ? arch_local_save_flags+0x40/0x40 [ 1803.334975] __should_failslab+0x124/0x180 [ 1803.339220] should_failslab+0x9/0x14 [ 1803.343032] kmem_cache_alloc+0x2be/0x730 [ 1803.347183] ? vmx_flush_tlb_gva+0x380/0x380 [ 1803.351584] ? mmu_topup_memory_caches+0xf7/0x390 [ 1803.356454] mmu_topup_memory_caches+0xf7/0x390 [ 1803.361113] kvm_mmu_load+0x21/0xfa0 [ 1803.364821] ? kvm_sched_in+0x82/0xa0 [ 1803.368634] vcpu_enter_guest+0x3dbe/0x6380 [ 1803.372967] ? preempt_notifier_register+0x200/0x200 [ 1803.378076] ? __switch_to_asm+0x34/0x70 [ 1803.382134] ? __switch_to_asm+0x34/0x70 [ 1803.386204] ? emulator_read_emulated+0x50/0x50 [ 1803.390882] ? __switch_to_asm+0x34/0x70 [ 1803.394955] ? __switch_to_asm+0x34/0x70 [ 1803.399010] ? __switch_to_asm+0x40/0x70 [ 1803.403076] ? __schedule+0x874/0x1ed0 [ 1803.406965] ? graph_lock+0x170/0x170 [ 1803.410752] ? lock_downgrade+0x900/0x900 [ 1803.414904] ? check_preemption_disabled+0x48/0x280 [ 1803.419957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.425513] ? check_preemption_disabled+0x48/0x280 [ 1803.430542] ? check_preemption_disabled+0x48/0x280 [ 1803.435570] ? __lock_is_held+0xb5/0x140 [ 1803.439655] ? lock_acquire+0x1ed/0x520 [ 1803.443632] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1803.448659] ? lock_release+0x970/0x970 [ 1803.452633] ? kvm_gen_update_masterclock+0x350/0x350 [ 1803.457825] ? preempt_schedule_common+0x1f/0xe0 [ 1803.462578] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1803.467418] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1803.472447] kvm_vcpu_ioctl+0x72b/0x1150 [ 1803.476501] ? kvm_vcpu_block+0x1030/0x1030 [ 1803.480827] ? find_held_lock+0x36/0x1c0 [ 1803.484897] ? __fget+0x4aa/0x740 [ 1803.488345] ? check_preemption_disabled+0x48/0x280 [ 1803.493355] ? kasan_check_read+0x11/0x20 [ 1803.497507] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1803.502800] ? rcu_bh_qs+0xc0/0xc0 [ 1803.506352] ? __fget+0x4d1/0x740 [ 1803.509829] ? ksys_dup3+0x680/0x680 [ 1803.513549] ? find_held_lock+0x36/0x1c0 [ 1803.517616] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1803.522554] ? kvm_vcpu_block+0x1030/0x1030 [ 1803.526878] do_vfs_ioctl+0x1de/0x1720 [ 1803.530770] ? __lock_is_held+0xb5/0x140 [ 1803.534837] ? ioctl_preallocate+0x300/0x300 [ 1803.539257] ? __fget_light+0x2e9/0x430 [ 1803.543231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.548755] ? smack_file_ioctl+0x210/0x3c0 [ 1803.553069] ? fget_raw+0x20/0x20 [ 1803.556530] ? smack_file_lock+0x2e0/0x2e0 [ 1803.560764] ? __sb_end_write+0xd9/0x110 [ 1803.564817] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1803.570338] ? fput+0x130/0x1a0 [ 1803.573607] ? do_syscall_64+0x9a/0x820 [ 1803.577580] ? do_syscall_64+0x9a/0x820 [ 1803.581562] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.587100] ? security_file_ioctl+0x94/0xc0 [ 1803.591514] ksys_ioctl+0xa9/0xd0 [ 1803.594960] __x64_sys_ioctl+0x73/0xb0 [ 1803.598981] do_syscall_64+0x1b9/0x820 [ 1803.602860] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1803.608214] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1803.613142] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1803.617992] ? trace_hardirqs_on_caller+0x310/0x310 [ 1803.622998] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1803.628023] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1803.633042] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1803.637897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1803.643111] RIP: 0033:0x457569 03:56:14 executing program 2 (fault-call:5 fault-nth:35): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1803.646299] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1803.665194] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1803.672915] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1803.680181] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1803.687446] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1803.694709] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1803.701987] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1803.778840] FAULT_INJECTION: forcing a failure. [ 1803.778840] name failslab, interval 1, probability 0, space 0, times 0 [ 1803.790413] CPU: 0 PID: 17742 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1803.797694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1803.807043] Call Trace: [ 1803.809642] dump_stack+0x1c4/0x2b6 [ 1803.813273] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1803.818475] ? __kernel_text_address+0xd/0x40 [ 1803.822985] ? unwind_get_return_address+0x61/0xa0 [ 1803.827948] should_fail.cold.4+0xa/0x17 [ 1803.832030] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1803.837136] ? save_stack+0xa9/0xd0 [ 1803.840765] ? graph_lock+0x170/0x170 [ 1803.844560] ? kasan_slab_alloc+0x12/0x20 [ 1803.848706] ? kmem_cache_alloc+0x12e/0x730 [ 1803.853032] ? mmu_topup_memory_caches+0xf7/0x390 [ 1803.857869] ? kvm_mmu_load+0x21/0xfa0 [ 1803.861771] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1803.866282] ? graph_lock+0x170/0x170 [ 1803.870099] ? ksys_ioctl+0xa9/0xd0 [ 1803.873717] ? __x64_sys_ioctl+0x73/0xb0 [ 1803.877779] ? do_syscall_64+0x1b9/0x820 [ 1803.881853] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1803.887229] ? find_held_lock+0x36/0x1c0 [ 1803.891302] ? __lock_is_held+0xb5/0x140 [ 1803.895371] ? ___might_sleep+0x1ed/0x300 [ 1803.899537] ? arch_local_save_flags+0x40/0x40 [ 1803.904142] __should_failslab+0x124/0x180 [ 1803.908382] should_failslab+0x9/0x14 [ 1803.912180] kmem_cache_alloc+0x2be/0x730 [ 1803.916342] ? vmx_flush_tlb_gva+0x380/0x380 [ 1803.920762] ? ima_get_action+0x7e/0xa0 [ 1803.924739] ? mmu_topup_memory_caches+0xf7/0x390 [ 1803.929574] mmu_topup_memory_caches+0xf7/0x390 [ 1803.934233] kvm_mmu_load+0x21/0xfa0 [ 1803.937972] vcpu_enter_guest+0x3dbe/0x6380 [ 1803.942308] ? emulator_read_emulated+0x50/0x50 [ 1803.946968] ? vmx_vcpu_load+0xb06/0x1030 [ 1803.951116] ? vmx_write_tsc_offset+0x680/0x680 [ 1803.955784] ? graph_lock+0x170/0x170 [ 1803.959592] ? lock_downgrade+0x900/0x900 [ 1803.963735] ? check_preemption_disabled+0x48/0x280 [ 1803.968752] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1803.974300] ? check_preemption_disabled+0x48/0x280 [ 1803.979322] ? check_preemption_disabled+0x48/0x280 [ 1803.984329] ? __lock_is_held+0xb5/0x140 [ 1803.988386] ? lock_acquire+0x1ed/0x520 [ 1803.992373] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1803.997397] ? lock_release+0x970/0x970 [ 1804.001373] ? kvm_gen_update_masterclock+0x350/0x350 [ 1804.006568] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1804.011053] ? preempt_notifier_dec+0x20/0x20 [ 1804.015540] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1804.020410] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1804.025452] kvm_vcpu_ioctl+0x72b/0x1150 [ 1804.029528] ? kvm_vcpu_block+0x1030/0x1030 [ 1804.033867] ? find_held_lock+0x36/0x1c0 [ 1804.037963] ? __fget+0x4aa/0x740 [ 1804.041456] ? check_preemption_disabled+0x48/0x280 [ 1804.046485] ? kasan_check_read+0x11/0x20 [ 1804.050655] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1804.050671] ? rcu_bh_qs+0xc0/0xc0 [ 1804.050698] ? __fget+0x4d1/0x740 [ 1804.050720] ? ksys_dup3+0x680/0x680 [ 1804.066692] ? find_held_lock+0x36/0x1c0 [ 1804.070776] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1804.075728] ? kvm_vcpu_block+0x1030/0x1030 [ 1804.080070] do_vfs_ioctl+0x1de/0x1720 [ 1804.083975] ? __lock_is_held+0xb5/0x140 [ 1804.088057] ? ioctl_preallocate+0x300/0x300 [ 1804.092479] ? __fget_light+0x2e9/0x430 [ 1804.096466] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1804.102016] ? smack_file_ioctl+0x210/0x3c0 [ 1804.106341] ? fget_raw+0x20/0x20 [ 1804.109785] ? smack_file_lock+0x2e0/0x2e0 [ 1804.114008] ? __sb_end_write+0xd9/0x110 [ 1804.118062] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1804.123591] ? fput+0x130/0x1a0 [ 1804.126869] ? do_syscall_64+0x9a/0x820 [ 1804.130843] ? do_syscall_64+0x9a/0x820 [ 1804.134838] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1804.140383] ? security_file_ioctl+0x94/0xc0 [ 1804.144796] ksys_ioctl+0xa9/0xd0 [ 1804.148266] __x64_sys_ioctl+0x73/0xb0 [ 1804.152174] do_syscall_64+0x1b9/0x820 [ 1804.156073] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1804.161440] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1804.166384] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1804.171230] ? trace_hardirqs_on_caller+0x310/0x310 [ 1804.176246] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1804.181263] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1804.186269] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1804.191119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1804.196306] RIP: 0033:0x457569 [ 1804.199490] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1804.218397] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:15 executing program 2 (fault-call:5 fault-nth:36): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1804.226104] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1804.233375] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1804.240641] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1804.247913] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1804.255185] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:15 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:15 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1804.397343] FAULT_INJECTION: forcing a failure. [ 1804.397343] name failslab, interval 1, probability 0, space 0, times 0 [ 1804.409113] CPU: 1 PID: 17772 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1804.416402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1804.425757] Call Trace: [ 1804.428339] dump_stack+0x1c4/0x2b6 [ 1804.431975] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1804.437169] ? __kernel_text_address+0xd/0x40 [ 1804.441659] ? unwind_get_return_address+0x61/0xa0 [ 1804.446600] should_fail.cold.4+0xa/0x17 [ 1804.450667] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1804.455781] ? save_stack+0xa9/0xd0 [ 1804.459398] ? graph_lock+0x170/0x170 [ 1804.463199] ? kasan_slab_alloc+0x12/0x20 [ 1804.467357] ? kmem_cache_alloc+0x12e/0x730 [ 1804.471672] ? mmu_topup_memory_caches+0xf7/0x390 [ 1804.476519] ? kvm_mmu_load+0x21/0xfa0 [ 1804.480409] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1804.484890] ? graph_lock+0x170/0x170 [ 1804.488689] ? ksys_ioctl+0xa9/0xd0 [ 1804.492325] ? __x64_sys_ioctl+0x73/0xb0 [ 1804.496373] ? do_syscall_64+0x1b9/0x820 [ 1804.500436] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1804.505799] ? find_held_lock+0x36/0x1c0 [ 1804.509851] ? __lock_is_held+0xb5/0x140 [ 1804.513905] ? ___might_sleep+0x1ed/0x300 [ 1804.518058] ? arch_local_save_flags+0x40/0x40 [ 1804.522667] __should_failslab+0x124/0x180 [ 1804.526919] should_failslab+0x9/0x14 [ 1804.530742] kmem_cache_alloc+0x2be/0x730 [ 1804.534894] ? vmx_flush_tlb_gva+0x380/0x380 [ 1804.539322] ? ima_get_action+0x7e/0xa0 [ 1804.543300] ? mmu_topup_memory_caches+0xf7/0x390 03:56:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1804.548133] mmu_topup_memory_caches+0xf7/0x390 [ 1804.552796] kvm_mmu_load+0x21/0xfa0 [ 1804.556504] vcpu_enter_guest+0x3dbe/0x6380 [ 1804.560845] ? emulator_read_emulated+0x50/0x50 [ 1804.565535] ? vmx_vcpu_load+0xb06/0x1030 [ 1804.569710] ? vmx_write_tsc_offset+0x680/0x680 [ 1804.574397] ? graph_lock+0x170/0x170 [ 1804.578202] ? lock_downgrade+0x900/0x900 [ 1804.582358] ? check_preemption_disabled+0x48/0x280 [ 1804.587386] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1804.592942] ? check_preemption_disabled+0x48/0x280 [ 1804.592959] ? check_preemption_disabled+0x48/0x280 [ 1804.592985] ? __lock_is_held+0xb5/0x140 [ 1804.593007] ? lock_acquire+0x1ed/0x520 [ 1804.593023] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1804.593043] ? lock_release+0x970/0x970 [ 1804.603243] ? kvm_gen_update_masterclock+0x350/0x350 [ 1804.603263] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1804.603278] ? preempt_notifier_dec+0x20/0x20 [ 1804.603308] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1804.603324] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1804.603357] kvm_vcpu_ioctl+0x72b/0x1150 [ 1804.603380] ? kvm_vcpu_block+0x1030/0x1030 [ 1804.652716] ? find_held_lock+0x36/0x1c0 [ 1804.656788] ? __fget+0x4aa/0x740 [ 1804.660246] ? check_preemption_disabled+0x48/0x280 [ 1804.665282] ? kasan_check_read+0x11/0x20 [ 1804.669460] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1804.674739] ? rcu_bh_qs+0xc0/0xc0 [ 1804.678288] ? __fget+0x4d1/0x740 [ 1804.681748] ? ksys_dup3+0x680/0x680 [ 1804.685452] ? find_held_lock+0x36/0x1c0 [ 1804.689516] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1804.694440] ? kvm_vcpu_block+0x1030/0x1030 [ 1804.698761] do_vfs_ioctl+0x1de/0x1720 [ 1804.702655] ? __lock_is_held+0xb5/0x140 [ 1804.706721] ? ioctl_preallocate+0x300/0x300 [ 1804.711134] ? __fget_light+0x2e9/0x430 [ 1804.715119] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1804.720672] ? smack_file_ioctl+0x210/0x3c0 [ 1804.725018] ? fget_raw+0x20/0x20 [ 1804.729047] ? smack_file_lock+0x2e0/0x2e0 [ 1804.733296] ? __sb_end_write+0xd9/0x110 [ 1804.737365] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1804.742888] ? fput+0x130/0x1a0 [ 1804.746157] ? do_syscall_64+0x9a/0x820 [ 1804.750135] ? do_syscall_64+0x9a/0x820 [ 1804.754113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1804.759655] ? security_file_ioctl+0x94/0xc0 [ 1804.764057] ksys_ioctl+0xa9/0xd0 [ 1804.767504] __x64_sys_ioctl+0x73/0xb0 [ 1804.771386] do_syscall_64+0x1b9/0x820 [ 1804.775277] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1804.780630] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1804.785548] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1804.790390] ? trace_hardirqs_on_caller+0x310/0x310 [ 1804.795420] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1804.800456] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1804.805481] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1804.810328] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1804.815516] RIP: 0033:0x457569 [ 1804.818702] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1804.837596] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1804.845319] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1804.852586] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1804.859840] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1804.867101] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1804.874358] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:17 executing program 2 (fault-call:5 fault-nth:37): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:17 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1806.288013] FAULT_INJECTION: forcing a failure. [ 1806.288013] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.299451] CPU: 1 PID: 17814 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1806.306721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.316062] Call Trace: [ 1806.318641] dump_stack+0x1c4/0x2b6 [ 1806.322266] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1806.327455] ? __kernel_text_address+0xd/0x40 [ 1806.332027] ? unwind_get_return_address+0x61/0xa0 [ 1806.336961] should_fail.cold.4+0xa/0x17 [ 1806.341015] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1806.346118] ? save_stack+0xa9/0xd0 [ 1806.349753] ? graph_lock+0x170/0x170 [ 1806.353542] ? kasan_slab_alloc+0x12/0x20 [ 1806.357678] ? kmem_cache_alloc+0x12e/0x730 [ 1806.362000] ? mmu_topup_memory_caches+0xf7/0x390 [ 1806.366847] ? kvm_mmu_load+0x21/0xfa0 [ 1806.370731] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1806.375220] ? graph_lock+0x170/0x170 [ 1806.379011] ? ksys_ioctl+0xa9/0xd0 [ 1806.382626] ? __x64_sys_ioctl+0x73/0xb0 [ 1806.386681] ? do_syscall_64+0x1b9/0x820 [ 1806.390734] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1806.396104] ? find_held_lock+0x36/0x1c0 [ 1806.400177] ? __lock_is_held+0xb5/0x140 [ 1806.404233] ? ___might_sleep+0x1ed/0x300 [ 1806.408369] ? arch_local_save_flags+0x40/0x40 [ 1806.412955] __should_failslab+0x124/0x180 [ 1806.417185] should_failslab+0x9/0x14 [ 1806.420982] kmem_cache_alloc+0x2be/0x730 [ 1806.425119] ? vmx_flush_tlb_gva+0x380/0x380 [ 1806.429527] ? mark_held_locks+0xc7/0x130 [ 1806.433672] ? mmu_topup_memory_caches+0xf7/0x390 [ 1806.438508] mmu_topup_memory_caches+0xf7/0x390 [ 1806.443169] kvm_mmu_load+0x21/0xfa0 [ 1806.446871] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1806.452413] ? check_preemption_disabled+0x48/0x280 [ 1806.457458] vcpu_enter_guest+0x3dbe/0x6380 [ 1806.461859] ? __phys_addr+0xa6/0x120 [ 1806.465675] ? emulator_read_emulated+0x50/0x50 [ 1806.470354] ? check_preemption_disabled+0x48/0x280 [ 1806.475377] ? vmx_vcpu_load+0xb06/0x1030 [ 1806.479534] ? vmx_write_tsc_offset+0x680/0x680 [ 1806.484210] ? graph_lock+0x170/0x170 [ 1806.488010] ? lock_downgrade+0x900/0x900 [ 1806.492161] ? check_preemption_disabled+0x48/0x280 [ 1806.497178] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.502729] ? check_preemption_disabled+0x48/0x280 [ 1806.507743] ? check_preemption_disabled+0x48/0x280 [ 1806.512770] ? __lock_is_held+0xb5/0x140 [ 1806.516850] ? lock_acquire+0x1ed/0x520 [ 1806.524135] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1806.529162] ? lock_release+0x970/0x970 [ 1806.533148] ? kvm_gen_update_masterclock+0x350/0x350 [ 1806.538337] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1806.542824] ? preempt_notifier_dec+0x20/0x20 [ 1806.547312] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1806.552152] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1806.557182] kvm_vcpu_ioctl+0x72b/0x1150 [ 1806.561247] ? kvm_vcpu_block+0x1030/0x1030 [ 1806.565575] ? find_held_lock+0x36/0x1c0 [ 1806.569661] ? __fget+0x4aa/0x740 [ 1806.573108] ? check_preemption_disabled+0x48/0x280 [ 1806.578129] ? kasan_check_read+0x11/0x20 [ 1806.582308] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1806.587615] ? rcu_bh_qs+0xc0/0xc0 [ 1806.591171] ? __fget+0x4d1/0x740 [ 1806.594618] ? ksys_dup3+0x680/0x680 [ 1806.598335] ? find_held_lock+0x36/0x1c0 [ 1806.602404] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1806.607350] ? kvm_vcpu_block+0x1030/0x1030 [ 1806.611684] do_vfs_ioctl+0x1de/0x1720 [ 1806.615580] ? __lock_is_held+0xb5/0x140 [ 1806.619672] ? ioctl_preallocate+0x300/0x300 [ 1806.624096] ? __fget_light+0x2e9/0x430 [ 1806.628085] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.633664] ? smack_file_ioctl+0x210/0x3c0 [ 1806.637990] ? fget_raw+0x20/0x20 [ 1806.641447] ? smack_file_lock+0x2e0/0x2e0 [ 1806.645689] ? __sb_end_write+0xd9/0x110 [ 1806.649769] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1806.655301] ? fput+0x130/0x1a0 [ 1806.658587] ? do_syscall_64+0x9a/0x820 [ 1806.662567] ? do_syscall_64+0x9a/0x820 [ 1806.666543] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1806.672112] ? security_file_ioctl+0x94/0xc0 [ 1806.676527] ksys_ioctl+0xa9/0xd0 [ 1806.679979] __x64_sys_ioctl+0x73/0xb0 [ 1806.683880] do_syscall_64+0x1b9/0x820 [ 1806.687774] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1806.693145] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1806.698090] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1806.702991] ? trace_hardirqs_on_caller+0x310/0x310 [ 1806.708011] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1806.713031] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1806.718061] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1806.722916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1806.728124] RIP: 0033:0x457569 [ 1806.731328] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1806.750236] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1806.757965] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1806.765242] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1806.772543] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1806.779819] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 03:56:17 executing program 2 (fault-call:5 fault-nth:38): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1806.787087] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1806.864906] FAULT_INJECTION: forcing a failure. [ 1806.864906] name failslab, interval 1, probability 0, space 0, times 0 [ 1806.876585] CPU: 1 PID: 17838 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1806.883962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1806.893326] Call Trace: [ 1806.895943] dump_stack+0x1c4/0x2b6 [ 1806.899590] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1806.904786] ? __kernel_text_address+0xd/0x40 [ 1806.909279] ? unwind_get_return_address+0x61/0xa0 [ 1806.914206] should_fail.cold.4+0xa/0x17 [ 1806.918276] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1806.923393] ? save_stack+0xa9/0xd0 [ 1806.927026] ? graph_lock+0x170/0x170 [ 1806.930824] ? kasan_slab_alloc+0x12/0x20 [ 1806.934989] ? kmem_cache_alloc+0x12e/0x730 [ 1806.939313] ? mmu_topup_memory_caches+0xf7/0x390 [ 1806.944163] ? kvm_mmu_load+0x21/0xfa0 [ 1806.948061] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1806.952572] ? graph_lock+0x170/0x170 [ 1806.956378] ? ksys_ioctl+0xa9/0xd0 [ 1806.960003] ? __x64_sys_ioctl+0x73/0xb0 [ 1806.964067] ? do_syscall_64+0x1b9/0x820 [ 1806.968144] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1806.973530] ? find_held_lock+0x36/0x1c0 [ 1806.977602] ? __lock_is_held+0xb5/0x140 [ 1806.981686] ? ___might_sleep+0x1ed/0x300 [ 1806.985857] ? arch_local_save_flags+0x40/0x40 [ 1806.990461] __should_failslab+0x124/0x180 [ 1806.994709] should_failslab+0x9/0x14 [ 1806.998528] kmem_cache_alloc+0x2be/0x730 [ 1807.002682] ? vmx_flush_tlb_gva+0x380/0x380 [ 1807.007113] ? ima_get_action+0x7e/0xa0 [ 1807.011103] ? mmu_topup_memory_caches+0xf7/0x390 [ 1807.015955] mmu_topup_memory_caches+0xf7/0x390 [ 1807.020630] kvm_mmu_load+0x21/0xfa0 [ 1807.024369] vcpu_enter_guest+0x3dbe/0x6380 [ 1807.028721] ? emulator_read_emulated+0x50/0x50 [ 1807.033395] ? vmx_vcpu_load+0xb06/0x1030 [ 1807.037535] ? vmx_write_tsc_offset+0x680/0x680 [ 1807.042201] ? graph_lock+0x170/0x170 [ 1807.046003] ? lock_downgrade+0x900/0x900 [ 1807.050152] ? check_preemption_disabled+0x48/0x280 [ 1807.055189] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.060737] ? check_preemption_disabled+0x48/0x280 [ 1807.065765] ? check_preemption_disabled+0x48/0x280 [ 1807.070801] ? __lock_is_held+0xb5/0x140 [ 1807.074883] ? lock_acquire+0x1ed/0x520 [ 1807.078886] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1807.083917] ? lock_release+0x970/0x970 [ 1807.087896] ? kvm_gen_update_masterclock+0x350/0x350 [ 1807.093077] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1807.097561] ? preempt_notifier_dec+0x20/0x20 [ 1807.102052] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1807.106882] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1807.111897] kvm_vcpu_ioctl+0x72b/0x1150 [ 1807.115973] ? kvm_vcpu_block+0x1030/0x1030 [ 1807.120313] ? find_held_lock+0x36/0x1c0 [ 1807.124378] ? __fget+0x4aa/0x740 [ 1807.127822] ? check_preemption_disabled+0x48/0x280 [ 1807.132832] ? kasan_check_read+0x11/0x20 [ 1807.136972] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1807.142250] ? rcu_bh_qs+0xc0/0xc0 [ 1807.145801] ? __fget+0x4d1/0x740 [ 1807.149262] ? ksys_dup3+0x680/0x680 [ 1807.152990] ? find_held_lock+0x36/0x1c0 [ 1807.157060] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1807.161997] ? kvm_vcpu_block+0x1030/0x1030 03:56:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8100]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1807.166333] do_vfs_ioctl+0x1de/0x1720 [ 1807.170236] ? __lock_is_held+0xb5/0x140 [ 1807.174338] ? ioctl_preallocate+0x300/0x300 [ 1807.178755] ? __fget_light+0x2e9/0x430 [ 1807.182743] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.188295] ? smack_file_ioctl+0x210/0x3c0 [ 1807.192629] ? fget_raw+0x20/0x20 [ 1807.196098] ? smack_file_lock+0x2e0/0x2e0 [ 1807.200343] ? __sb_end_write+0xd9/0x110 [ 1807.204423] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1807.209974] ? fput+0x130/0x1a0 03:56:18 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1807.213263] ? do_syscall_64+0x9a/0x820 [ 1807.213280] ? do_syscall_64+0x9a/0x820 [ 1807.213300] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.213320] ? security_file_ioctl+0x94/0xc0 [ 1807.231203] ksys_ioctl+0xa9/0xd0 [ 1807.234679] __x64_sys_ioctl+0x73/0xb0 [ 1807.238586] do_syscall_64+0x1b9/0x820 [ 1807.242485] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1807.247860] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1807.247877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1807.247897] ? trace_hardirqs_on_caller+0x310/0x310 [ 1807.247915] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1807.247944] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1807.247966] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1807.257735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1807.257748] RIP: 0033:0x457569 [ 1807.257766] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1807.257775] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 03:56:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x81000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:18 executing program 2 (fault-call:5 fault-nth:39): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1807.257792] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1807.257801] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1807.257810] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1807.257824] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1807.341685] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1807.467106] FAULT_INJECTION: forcing a failure. [ 1807.467106] name failslab, interval 1, probability 0, space 0, times 0 [ 1807.478943] CPU: 1 PID: 17869 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1807.486238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1807.495631] Call Trace: [ 1807.498222] dump_stack+0x1c4/0x2b6 [ 1807.501871] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1807.507068] ? __kernel_text_address+0xd/0x40 [ 1807.511556] ? unwind_get_return_address+0x61/0xa0 [ 1807.516482] should_fail.cold.4+0xa/0x17 [ 1807.520550] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1807.525650] ? save_stack+0xa9/0xd0 [ 1807.529281] ? graph_lock+0x170/0x170 [ 1807.533080] ? kasan_slab_alloc+0x12/0x20 [ 1807.537227] ? kmem_cache_alloc+0x12e/0x730 [ 1807.541563] ? mmu_topup_memory_caches+0xf7/0x390 [ 1807.546406] ? kvm_mmu_load+0x21/0xfa0 [ 1807.550281] ? vcpu_enter_guest+0x3dbe/0x6380 [ 1807.554763] ? graph_lock+0x170/0x170 [ 1807.558565] ? ksys_ioctl+0xa9/0xd0 [ 1807.562193] ? __x64_sys_ioctl+0x73/0xb0 [ 1807.566251] ? do_syscall_64+0x1b9/0x820 [ 1807.570301] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1807.575673] ? find_held_lock+0x36/0x1c0 [ 1807.579755] ? __lock_is_held+0xb5/0x140 [ 1807.583824] ? ___might_sleep+0x1ed/0x300 [ 1807.588001] ? arch_local_save_flags+0x40/0x40 [ 1807.592585] __should_failslab+0x124/0x180 [ 1807.596887] should_failslab+0x9/0x14 [ 1807.600691] kmem_cache_alloc+0x2be/0x730 [ 1807.604852] ? vmx_flush_tlb_gva+0x380/0x380 [ 1807.609263] ? ima_get_action+0x7e/0xa0 [ 1807.613243] ? mmu_topup_memory_caches+0xf7/0x390 [ 1807.618092] mmu_topup_memory_caches+0xf7/0x390 [ 1807.622764] kvm_mmu_load+0x21/0xfa0 [ 1807.626500] vcpu_enter_guest+0x3dbe/0x6380 [ 1807.630829] ? emulator_read_emulated+0x50/0x50 [ 1807.635522] ? vmx_vcpu_load+0xb06/0x1030 [ 1807.639686] ? vmx_write_tsc_offset+0x680/0x680 [ 1807.644371] ? graph_lock+0x170/0x170 [ 1807.648174] ? lock_downgrade+0x900/0x900 [ 1807.652351] ? check_preemption_disabled+0x48/0x280 [ 1807.657370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.662909] ? check_preemption_disabled+0x48/0x280 [ 1807.667953] ? check_preemption_disabled+0x48/0x280 [ 1807.672983] ? __lock_is_held+0xb5/0x140 [ 1807.677048] ? lock_acquire+0x1ed/0x520 [ 1807.681028] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1807.686052] ? lock_release+0x970/0x970 [ 1807.690023] ? kvm_gen_update_masterclock+0x350/0x350 [ 1807.695226] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1807.699738] ? preempt_notifier_dec+0x20/0x20 [ 1807.704255] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1807.709113] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1807.714141] kvm_vcpu_ioctl+0x72b/0x1150 [ 1807.718200] ? kvm_vcpu_block+0x1030/0x1030 [ 1807.722514] ? find_held_lock+0x36/0x1c0 [ 1807.726566] ? __fget+0x4aa/0x740 [ 1807.730009] ? check_preemption_disabled+0x48/0x280 [ 1807.735016] ? kasan_check_read+0x11/0x20 [ 1807.739155] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1807.744424] ? rcu_bh_qs+0xc0/0xc0 [ 1807.747980] ? __fget+0x4d1/0x740 [ 1807.751469] ? ksys_dup3+0x680/0x680 [ 1807.755194] ? find_held_lock+0x36/0x1c0 [ 1807.759266] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1807.764240] ? kvm_vcpu_block+0x1030/0x1030 [ 1807.768557] do_vfs_ioctl+0x1de/0x1720 [ 1807.772434] ? __lock_is_held+0xb5/0x140 [ 1807.776484] ? ioctl_preallocate+0x300/0x300 [ 1807.780889] ? __fget_light+0x2e9/0x430 [ 1807.784877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.790402] ? smack_file_ioctl+0x210/0x3c0 [ 1807.794722] ? fget_raw+0x20/0x20 [ 1807.798166] ? smack_file_lock+0x2e0/0x2e0 [ 1807.802390] ? __sb_end_write+0xd9/0x110 [ 1807.806447] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1807.811977] ? fput+0x130/0x1a0 [ 1807.815260] ? do_syscall_64+0x9a/0x820 [ 1807.819225] ? do_syscall_64+0x9a/0x820 [ 1807.823190] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1807.828734] ? security_file_ioctl+0x94/0xc0 [ 1807.833148] ksys_ioctl+0xa9/0xd0 [ 1807.836648] __x64_sys_ioctl+0x73/0xb0 [ 1807.840536] do_syscall_64+0x1b9/0x820 [ 1807.844440] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1807.849821] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1807.854753] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1807.859596] ? trace_hardirqs_on_caller+0x310/0x310 [ 1807.864624] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1807.869650] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1807.874684] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1807.879538] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1807.884744] RIP: 0033:0x457569 [ 1807.887958] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1807.906861] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1807.914559] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1807.921812] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1807.929078] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1807.936352] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1807.943622] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:20 executing program 2 (fault-call:5 fault-nth:40): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:20 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1809.346907] FAULT_INJECTION: forcing a failure. [ 1809.346907] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1809.358939] CPU: 1 PID: 17900 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1809.366215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.375574] Call Trace: [ 1809.378164] dump_stack+0x1c4/0x2b6 [ 1809.381798] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1809.387002] should_fail.cold.4+0xa/0x17 [ 1809.391072] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1809.396177] ? graph_lock+0x170/0x170 [ 1809.399995] ? rcu_bh_qs+0xc0/0xc0 [ 1809.403561] ? unwind_dump+0x190/0x190 [ 1809.407456] ? graph_lock+0x170/0x170 [ 1809.411281] ? is_bpf_text_address+0xd3/0x170 [ 1809.415773] ? __lock_is_held+0xb5/0x140 [ 1809.419845] ? ___might_sleep+0x1ed/0x300 [ 1809.424008] ? lock_release+0x970/0x970 [ 1809.427996] ? arch_local_save_flags+0x40/0x40 [ 1809.432590] ? save_stack+0x43/0xd0 [ 1809.436217] ? kasan_kmalloc+0xc7/0xe0 [ 1809.440109] ? kasan_slab_alloc+0x12/0x20 [ 1809.444249] ? __might_sleep+0x95/0x190 [ 1809.448217] __alloc_pages_nodemask+0x34b/0xde0 [ 1809.452877] ? lock_downgrade+0x900/0x900 [ 1809.457025] ? check_preemption_disabled+0x48/0x280 [ 1809.462044] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 1809.467058] ? kasan_check_read+0x11/0x20 [ 1809.471218] ? graph_lock+0x170/0x170 [ 1809.475033] ? rcu_bh_qs+0xc0/0xc0 [ 1809.478580] ? check_preemption_disabled+0x48/0x280 [ 1809.483590] ? check_preemption_disabled+0x48/0x280 [ 1809.488618] ? __lock_is_held+0xb5/0x140 [ 1809.492713] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1809.498266] alloc_pages_current+0x10c/0x210 [ 1809.502680] __get_free_pages+0xc/0x40 [ 1809.506581] mmu_topup_memory_caches+0x1ee/0x390 [ 1809.511344] kvm_mmu_load+0x21/0xfa0 [ 1809.515087] vcpu_enter_guest+0x3dbe/0x6380 [ 1809.519439] ? emulator_read_emulated+0x50/0x50 [ 1809.524116] ? vmx_vcpu_load+0xb06/0x1030 [ 1809.528259] ? vmx_write_tsc_offset+0x680/0x680 [ 1809.532936] ? graph_lock+0x170/0x170 [ 1809.536726] ? lock_downgrade+0x900/0x900 [ 1809.540877] ? check_preemption_disabled+0x48/0x280 [ 1809.545903] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1809.551464] ? check_preemption_disabled+0x48/0x280 [ 1809.556483] ? check_preemption_disabled+0x48/0x280 [ 1809.561528] ? __lock_is_held+0xb5/0x140 [ 1809.565603] ? lock_acquire+0x1ed/0x520 [ 1809.569575] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1809.574597] ? lock_release+0x970/0x970 [ 1809.578581] ? kvm_gen_update_masterclock+0x350/0x350 [ 1809.583773] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1809.588284] ? preempt_notifier_dec+0x20/0x20 [ 1809.592802] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1809.597808] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1809.602847] kvm_vcpu_ioctl+0x72b/0x1150 [ 1809.606912] ? kvm_vcpu_block+0x1030/0x1030 [ 1809.611242] ? find_held_lock+0x36/0x1c0 [ 1809.615310] ? __fget+0x4aa/0x740 [ 1809.618780] ? check_preemption_disabled+0x48/0x280 [ 1809.623813] ? kasan_check_read+0x11/0x20 [ 1809.627966] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1809.633231] ? rcu_bh_qs+0xc0/0xc0 [ 1809.636763] ? __fget+0x4d1/0x740 [ 1809.640209] ? ksys_dup3+0x680/0x680 [ 1809.643920] ? find_held_lock+0x36/0x1c0 [ 1809.647996] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1809.652948] ? kvm_vcpu_block+0x1030/0x1030 [ 1809.657284] do_vfs_ioctl+0x1de/0x1720 [ 1809.661177] ? __lock_is_held+0xb5/0x140 [ 1809.665241] ? ioctl_preallocate+0x300/0x300 [ 1809.669664] ? __fget_light+0x2e9/0x430 [ 1809.673652] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1809.679193] ? smack_file_ioctl+0x210/0x3c0 [ 1809.683518] ? fget_raw+0x20/0x20 [ 1809.686961] ? smack_file_lock+0x2e0/0x2e0 [ 1809.691199] ? __sb_end_write+0xd9/0x110 [ 1809.695270] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1809.700799] ? fput+0x130/0x1a0 [ 1809.704088] ? do_syscall_64+0x9a/0x820 [ 1809.708073] ? do_syscall_64+0x9a/0x820 [ 1809.712062] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1809.717614] ? security_file_ioctl+0x94/0xc0 [ 1809.722043] ksys_ioctl+0xa9/0xd0 [ 1809.725517] __x64_sys_ioctl+0x73/0xb0 [ 1809.729420] do_syscall_64+0x1b9/0x820 [ 1809.733318] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1809.738687] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1809.743608] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1809.748461] ? trace_hardirqs_on_caller+0x310/0x310 [ 1809.753479] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1809.758494] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1809.763532] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1809.768375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1809.773558] RIP: 0033:0x457569 [ 1809.776754] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:56:20 executing program 2 (fault-call:5 fault-nth:41): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1809.795660] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1809.803388] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1809.810668] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1809.818035] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1809.825290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1809.832546] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1809.906254] FAULT_INJECTION: forcing a failure. [ 1809.906254] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1809.918177] CPU: 1 PID: 17920 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1809.925469] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1809.934828] Call Trace: [ 1809.937454] dump_stack+0x1c4/0x2b6 [ 1809.941103] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1809.946300] ? graph_lock+0x170/0x170 [ 1809.950111] should_fail.cold.4+0xa/0x17 [ 1809.954178] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1809.959295] ? graph_lock+0x170/0x170 [ 1809.963108] ? graph_lock+0x170/0x170 [ 1809.966991] ? percpu_ref_put_many+0x11c/0x260 [ 1809.971584] ? lock_downgrade+0x900/0x900 [ 1809.975737] ? check_preemption_disabled+0x48/0x280 [ 1809.980764] ? __lock_is_held+0xb5/0x140 [ 1809.984834] ? ___might_sleep+0x1ed/0x300 [ 1809.988993] ? lock_release+0x970/0x970 [ 1809.992972] ? arch_local_save_flags+0x40/0x40 [ 1809.997542] ? __lock_is_held+0xb5/0x140 [ 1810.001640] ? __might_sleep+0x95/0x190 [ 1810.005634] __alloc_pages_nodemask+0x34b/0xde0 [ 1810.010319] ? lock_downgrade+0x900/0x900 [ 1810.014485] ? check_preemption_disabled+0x48/0x280 [ 1810.019505] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 1810.024525] ? kasan_check_read+0x11/0x20 [ 1810.028661] ? graph_lock+0x170/0x170 [ 1810.032469] ? rcu_bh_qs+0xc0/0xc0 [ 1810.036000] ? check_preemption_disabled+0x48/0x280 [ 1810.041016] ? check_preemption_disabled+0x48/0x280 [ 1810.046059] ? __lock_is_held+0xb5/0x140 [ 1810.050132] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1810.055672] alloc_pages_current+0x10c/0x210 [ 1810.060101] __get_free_pages+0xc/0x40 [ 1810.063992] mmu_topup_memory_caches+0x1ee/0x390 [ 1810.068748] kvm_mmu_load+0x21/0xfa0 [ 1810.072474] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1810.078024] ? check_preemption_disabled+0x48/0x280 [ 1810.083051] vcpu_enter_guest+0x3dbe/0x6380 [ 1810.087386] ? emulator_read_emulated+0x50/0x50 [ 1810.092062] ? vmx_vcpu_load+0xb06/0x1030 [ 1810.096214] ? vmx_write_tsc_offset+0x680/0x680 [ 1810.100898] ? graph_lock+0x170/0x170 [ 1810.104715] ? lock_downgrade+0x900/0x900 [ 1810.108866] ? check_preemption_disabled+0x48/0x280 [ 1810.113886] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1810.119422] ? check_preemption_disabled+0x48/0x280 [ 1810.124445] ? check_preemption_disabled+0x48/0x280 [ 1810.129476] ? __lock_is_held+0xb5/0x140 [ 1810.133540] ? lock_acquire+0x1ed/0x520 [ 1810.137512] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1810.142530] ? lock_release+0x970/0x970 [ 1810.146502] ? kvm_gen_update_masterclock+0x350/0x350 [ 1810.151717] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1810.156218] ? preempt_notifier_dec+0x20/0x20 [ 1810.160715] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1810.165555] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1810.170596] kvm_vcpu_ioctl+0x72b/0x1150 [ 1810.174667] ? kvm_vcpu_block+0x1030/0x1030 [ 1810.179005] ? find_held_lock+0x36/0x1c0 [ 1810.183066] ? __fget+0x4aa/0x740 [ 1810.186526] ? check_preemption_disabled+0x48/0x280 [ 1810.191565] ? kasan_check_read+0x11/0x20 [ 1810.195722] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1810.201003] ? rcu_bh_qs+0xc0/0xc0 [ 1810.204583] ? __fget+0x4d1/0x740 [ 1810.208053] ? ksys_dup3+0x680/0x680 [ 1810.211778] ? find_held_lock+0x36/0x1c0 [ 1810.215854] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1810.220804] ? kvm_vcpu_block+0x1030/0x1030 [ 1810.225141] do_vfs_ioctl+0x1de/0x1720 [ 1810.229034] ? __lock_is_held+0xb5/0x140 [ 1810.233110] ? ioctl_preallocate+0x300/0x300 [ 1810.237532] ? __fget_light+0x2e9/0x430 [ 1810.241518] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1810.241538] ? smack_file_ioctl+0x210/0x3c0 [ 1810.241551] ? fget_raw+0x20/0x20 [ 1810.241571] ? smack_file_lock+0x2e0/0x2e0 [ 1810.259082] ? __sb_end_write+0xd9/0x110 [ 1810.259105] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1810.259118] ? fput+0x130/0x1a0 [ 1810.259137] ? do_syscall_64+0x9a/0x820 [ 1810.259152] ? do_syscall_64+0x9a/0x820 [ 1810.259171] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1810.259189] ? security_file_ioctl+0x94/0xc0 [ 1810.259222] ksys_ioctl+0xa9/0xd0 [ 1810.276046] __x64_sys_ioctl+0x73/0xb0 [ 1810.276067] do_syscall_64+0x1b9/0x820 [ 1810.276085] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 03:56:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1810.276104] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1810.276125] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1810.297333] ? trace_hardirqs_on_caller+0x310/0x310 [ 1810.297353] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1810.297372] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1810.297395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1810.297421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1810.297438] RIP: 0033:0x457569 [ 1810.344639] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1810.363550] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.363569] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1810.363578] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1810.363588] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1810.363597] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1810.363606] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:21 executing program 2 (fault-call:5 fault-nth:42): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1810.481491] FAULT_INJECTION: forcing a failure. [ 1810.481491] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1810.493504] CPU: 1 PID: 17950 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1810.500795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1810.510155] Call Trace: [ 1810.512735] dump_stack+0x1c4/0x2b6 [ 1810.516355] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1810.521536] ? graph_lock+0x170/0x170 [ 1810.525355] should_fail.cold.4+0xa/0x17 [ 1810.529420] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1810.534539] ? graph_lock+0x170/0x170 [ 1810.538356] ? graph_lock+0x170/0x170 [ 1810.542152] ? percpu_ref_put_many+0x11c/0x260 [ 1810.546746] ? lock_downgrade+0x900/0x900 [ 1810.550900] ? check_preemption_disabled+0x48/0x280 [ 1810.555920] ? __lock_is_held+0xb5/0x140 [ 1810.559999] ? ___might_sleep+0x1ed/0x300 [ 1810.564155] ? lock_release+0x970/0x970 [ 1810.568129] ? arch_local_save_flags+0x40/0x40 [ 1810.572723] ? __lock_is_held+0xb5/0x140 [ 1810.576777] ? __might_sleep+0x95/0x190 [ 1810.580746] __alloc_pages_nodemask+0x34b/0xde0 [ 1810.585401] ? lock_downgrade+0x900/0x900 [ 1810.589551] ? check_preemption_disabled+0x48/0x280 [ 1810.594586] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 1810.599613] ? kasan_check_read+0x11/0x20 [ 1810.603775] ? graph_lock+0x170/0x170 [ 1810.607579] ? rcu_bh_qs+0xc0/0xc0 [ 1810.611135] ? check_preemption_disabled+0x48/0x280 [ 1810.616165] ? check_preemption_disabled+0x48/0x280 [ 1810.621190] ? __lock_is_held+0xb5/0x140 [ 1810.625263] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1810.630820] alloc_pages_current+0x10c/0x210 [ 1810.635236] __get_free_pages+0xc/0x40 [ 1810.639125] mmu_topup_memory_caches+0x1ee/0x390 [ 1810.643885] kvm_mmu_load+0x21/0xfa0 [ 1810.647611] vcpu_enter_guest+0x3dbe/0x6380 [ 1810.651972] ? emulator_read_emulated+0x50/0x50 [ 1810.656664] ? vmx_vcpu_load+0xb06/0x1030 [ 1810.660825] ? vmx_write_tsc_offset+0x680/0x680 [ 1810.665500] ? graph_lock+0x170/0x170 [ 1810.669298] ? lock_downgrade+0x900/0x900 [ 1810.673460] ? check_preemption_disabled+0x48/0x280 03:56:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1810.678488] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1810.684043] ? check_preemption_disabled+0x48/0x280 [ 1810.689073] ? check_preemption_disabled+0x48/0x280 [ 1810.694106] ? __lock_is_held+0xb5/0x140 [ 1810.698181] ? lock_acquire+0x1ed/0x520 [ 1810.702172] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1810.702197] ? lock_release+0x970/0x970 [ 1810.702214] ? kvm_gen_update_masterclock+0x350/0x350 [ 1810.702232] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1810.702252] ? preempt_notifier_dec+0x20/0x20 [ 1810.711243] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1810.711258] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1810.711289] kvm_vcpu_ioctl+0x72b/0x1150 [ 1810.711309] ? kvm_vcpu_block+0x1030/0x1030 [ 1810.711329] ? find_held_lock+0x36/0x1c0 [ 1810.748201] ? __fget+0x4aa/0x740 [ 1810.751650] ? check_preemption_disabled+0x48/0x280 [ 1810.756673] ? kasan_check_read+0x11/0x20 [ 1810.760833] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1810.766115] ? rcu_bh_qs+0xc0/0xc0 [ 1810.769685] ? __fget+0x4d1/0x740 [ 1810.773168] ? ksys_dup3+0x680/0x680 [ 1810.776896] ? find_held_lock+0x36/0x1c0 [ 1810.780991] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1810.785956] ? kvm_vcpu_block+0x1030/0x1030 [ 1810.790286] do_vfs_ioctl+0x1de/0x1720 [ 1810.794165] ? __lock_is_held+0xb5/0x140 [ 1810.798218] ? ioctl_preallocate+0x300/0x300 [ 1810.802628] ? __fget_light+0x2e9/0x430 [ 1810.806606] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1810.812141] ? smack_file_ioctl+0x210/0x3c0 [ 1810.816461] ? fget_raw+0x20/0x20 [ 1810.819911] ? smack_file_lock+0x2e0/0x2e0 [ 1810.824154] ? __sb_end_write+0xd9/0x110 [ 1810.828214] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1810.833747] ? fput+0x130/0x1a0 [ 1810.837042] ? do_syscall_64+0x9a/0x820 [ 1810.841029] ? do_syscall_64+0x9a/0x820 [ 1810.845007] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1810.850542] ? security_file_ioctl+0x94/0xc0 [ 1810.854975] ksys_ioctl+0xa9/0xd0 [ 1810.858448] __x64_sys_ioctl+0x73/0xb0 [ 1810.862340] do_syscall_64+0x1b9/0x820 [ 1810.866222] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1810.871578] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1810.876494] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1810.881338] ? trace_hardirqs_on_caller+0x310/0x310 [ 1810.886367] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1810.891386] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1810.896396] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1810.901243] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1810.906426] RIP: 0033:0x457569 [ 1810.909634] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:56:22 executing program 2 (fault-call:5 fault-nth:43): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1810.928535] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1810.936234] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1810.943502] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1810.950779] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1810.958057] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1810.965329] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1811.034988] FAULT_INJECTION: forcing a failure. [ 1811.034988] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1811.046944] CPU: 0 PID: 17968 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1811.054233] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1811.063594] Call Trace: [ 1811.066214] dump_stack+0x1c4/0x2b6 [ 1811.069847] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1811.075041] ? graph_lock+0x170/0x170 [ 1811.078872] should_fail.cold.4+0xa/0x17 [ 1811.082950] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1811.088060] ? graph_lock+0x170/0x170 [ 1811.091893] ? graph_lock+0x170/0x170 [ 1811.095720] ? percpu_ref_put_many+0x11c/0x260 [ 1811.100297] ? lock_downgrade+0x900/0x900 [ 1811.104443] ? check_preemption_disabled+0x48/0x280 [ 1811.109484] ? __lock_is_held+0xb5/0x140 [ 1811.113549] ? ___might_sleep+0x1ed/0x300 [ 1811.117695] ? lock_release+0x970/0x970 [ 1811.121686] ? arch_local_save_flags+0x40/0x40 [ 1811.126275] ? __lock_is_held+0xb5/0x140 [ 1811.130337] ? __might_sleep+0x95/0x190 [ 1811.134313] __alloc_pages_nodemask+0x34b/0xde0 [ 1811.138997] ? lock_downgrade+0x900/0x900 [ 1811.143151] ? check_preemption_disabled+0x48/0x280 [ 1811.148171] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 1811.153210] ? kasan_check_read+0x11/0x20 [ 1811.157357] ? graph_lock+0x170/0x170 [ 1811.161151] ? rcu_bh_qs+0xc0/0xc0 [ 1811.164694] ? check_preemption_disabled+0x48/0x280 [ 1811.169713] ? check_preemption_disabled+0x48/0x280 [ 1811.174740] ? __lock_is_held+0xb5/0x140 [ 1811.178832] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1811.184362] alloc_pages_current+0x10c/0x210 [ 1811.188760] __get_free_pages+0xc/0x40 [ 1811.192652] mmu_topup_memory_caches+0x1ee/0x390 [ 1811.197415] kvm_mmu_load+0x21/0xfa0 [ 1811.201156] vcpu_enter_guest+0x3dbe/0x6380 [ 1811.205505] ? emulator_read_emulated+0x50/0x50 [ 1811.210177] ? vmx_vcpu_load+0xb06/0x1030 [ 1811.214341] ? vmx_write_tsc_offset+0x680/0x680 [ 1811.219027] ? graph_lock+0x170/0x170 [ 1811.222839] ? lock_downgrade+0x900/0x900 [ 1811.226995] ? check_preemption_disabled+0x48/0x280 [ 1811.232017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1811.237555] ? check_preemption_disabled+0x48/0x280 [ 1811.242585] ? check_preemption_disabled+0x48/0x280 [ 1811.247610] ? __lock_is_held+0xb5/0x140 [ 1811.251672] ? lock_acquire+0x1ed/0x520 [ 1811.255642] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1811.260667] ? lock_release+0x970/0x970 [ 1811.264659] ? kvm_gen_update_masterclock+0x350/0x350 [ 1811.269865] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1811.274379] ? preempt_notifier_dec+0x20/0x20 [ 1811.278898] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1811.283757] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1811.288786] kvm_vcpu_ioctl+0x72b/0x1150 [ 1811.292855] ? kvm_vcpu_block+0x1030/0x1030 [ 1811.297184] ? find_held_lock+0x36/0x1c0 [ 1811.301271] ? __fget+0x4aa/0x740 [ 1811.304726] ? check_preemption_disabled+0x48/0x280 [ 1811.309751] ? kasan_check_read+0x11/0x20 [ 1811.313903] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1811.319183] ? rcu_bh_qs+0xc0/0xc0 [ 1811.322738] ? __fget+0x4d1/0x740 [ 1811.326183] ? ksys_dup3+0x680/0x680 [ 1811.329892] ? find_held_lock+0x36/0x1c0 [ 1811.333968] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1811.338905] ? kvm_vcpu_block+0x1030/0x1030 [ 1811.343228] do_vfs_ioctl+0x1de/0x1720 [ 1811.347115] ? __lock_is_held+0xb5/0x140 [ 1811.351178] ? ioctl_preallocate+0x300/0x300 [ 1811.355589] ? __fget_light+0x2e9/0x430 [ 1811.359571] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1811.365120] ? smack_file_ioctl+0x210/0x3c0 [ 1811.369449] ? fget_raw+0x20/0x20 [ 1811.372908] ? smack_file_lock+0x2e0/0x2e0 [ 1811.377142] ? __sb_end_write+0xd9/0x110 [ 1811.381213] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1811.386749] ? fput+0x130/0x1a0 [ 1811.390020] ? do_syscall_64+0x9a/0x820 [ 1811.393996] ? do_syscall_64+0x9a/0x820 [ 1811.397976] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1811.403499] ? security_file_ioctl+0x94/0xc0 [ 1811.407900] ksys_ioctl+0xa9/0xd0 [ 1811.411353] __x64_sys_ioctl+0x73/0xb0 [ 1811.415246] do_syscall_64+0x1b9/0x820 [ 1811.419144] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1811.424523] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1811.429462] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1811.434308] ? trace_hardirqs_on_caller+0x310/0x310 [ 1811.439331] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1811.444346] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1811.449380] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1811.454239] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1811.459415] RIP: 0033:0x457569 [ 1811.462597] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:56:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1811.481494] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1811.489225] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1811.496589] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1811.503867] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1811.511136] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1811.518393] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:23 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:23 executing program 2 (fault-call:5 fault-nth:44): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1812.368914] FAULT_INJECTION: forcing a failure. [ 1812.368914] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1812.380867] CPU: 0 PID: 18004 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1812.388159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.397536] Call Trace: [ 1812.400115] dump_stack+0x1c4/0x2b6 [ 1812.403750] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1812.408944] ? graph_lock+0x170/0x170 [ 1812.412756] should_fail.cold.4+0xa/0x17 [ 1812.416825] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1812.421915] ? graph_lock+0x170/0x170 [ 1812.425711] ? graph_lock+0x170/0x170 [ 1812.429512] ? percpu_ref_put_many+0x11c/0x260 [ 1812.434106] ? lock_downgrade+0x900/0x900 [ 1812.438271] ? check_preemption_disabled+0x48/0x280 [ 1812.443288] ? __lock_is_held+0xb5/0x140 [ 1812.447361] ? ___might_sleep+0x1ed/0x300 [ 1812.451510] ? lock_release+0x970/0x970 [ 1812.455484] ? arch_local_save_flags+0x40/0x40 [ 1812.460080] ? __lock_is_held+0xb5/0x140 [ 1812.464139] ? __might_sleep+0x95/0x190 [ 1812.468103] __alloc_pages_nodemask+0x34b/0xde0 [ 1812.472762] ? lock_downgrade+0x900/0x900 [ 1812.476910] ? check_preemption_disabled+0x48/0x280 [ 1812.481949] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 1812.486962] ? kasan_check_read+0x11/0x20 [ 1812.491110] ? graph_lock+0x170/0x170 [ 1812.494923] ? rcu_bh_qs+0xc0/0xc0 [ 1812.498493] ? check_preemption_disabled+0x48/0x280 [ 1812.503519] ? check_preemption_disabled+0x48/0x280 [ 1812.508559] ? __lock_is_held+0xb5/0x140 [ 1812.512648] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1812.518208] alloc_pages_current+0x10c/0x210 [ 1812.518234] __get_free_pages+0xc/0x40 [ 1812.526528] mmu_topup_memory_caches+0x1ee/0x390 [ 1812.526551] kvm_mmu_load+0x21/0xfa0 [ 1812.526582] vcpu_enter_guest+0x3dbe/0x6380 [ 1812.526612] ? emulator_read_emulated+0x50/0x50 [ 1812.526634] ? vmx_vcpu_load+0xb06/0x1030 [ 1812.548198] ? vmx_write_tsc_offset+0x680/0x680 [ 1812.552889] ? graph_lock+0x170/0x170 [ 1812.556703] ? lock_downgrade+0x900/0x900 [ 1812.560872] ? check_preemption_disabled+0x48/0x280 03:56:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1812.565906] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1812.571455] ? check_preemption_disabled+0x48/0x280 [ 1812.576458] ? check_preemption_disabled+0x48/0x280 [ 1812.581485] ? __lock_is_held+0xb5/0x140 [ 1812.585549] ? lock_acquire+0x1ed/0x520 [ 1812.589519] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1812.594552] ? lock_release+0x970/0x970 [ 1812.598531] ? kvm_gen_update_masterclock+0x350/0x350 [ 1812.603726] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1812.608241] ? preempt_notifier_dec+0x20/0x20 [ 1812.612762] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1812.617848] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1812.622866] kvm_vcpu_ioctl+0x72b/0x1150 [ 1812.626936] ? kvm_vcpu_block+0x1030/0x1030 [ 1812.631264] ? find_held_lock+0x36/0x1c0 [ 1812.635319] ? __fget+0x4aa/0x740 [ 1812.638764] ? check_preemption_disabled+0x48/0x280 [ 1812.643785] ? kasan_check_read+0x11/0x20 [ 1812.647948] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1812.653229] ? rcu_bh_qs+0xc0/0xc0 [ 1812.656776] ? __fget+0x4d1/0x740 [ 1812.660236] ? ksys_dup3+0x680/0x680 [ 1812.663946] ? find_held_lock+0x36/0x1c0 [ 1812.668012] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1812.672948] ? kvm_vcpu_block+0x1030/0x1030 [ 1812.677267] do_vfs_ioctl+0x1de/0x1720 [ 1812.681141] ? __lock_is_held+0xb5/0x140 [ 1812.685191] ? ioctl_preallocate+0x300/0x300 [ 1812.689599] ? __fget_light+0x2e9/0x430 [ 1812.693564] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1812.699101] ? smack_file_ioctl+0x210/0x3c0 [ 1812.703423] ? fget_raw+0x20/0x20 [ 1812.706868] ? smack_file_lock+0x2e0/0x2e0 [ 1812.711101] ? __sb_end_write+0xd9/0x110 [ 1812.715166] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1812.720695] ? fput+0x130/0x1a0 [ 1812.723979] ? do_syscall_64+0x9a/0x820 [ 1812.727958] ? do_syscall_64+0x9a/0x820 [ 1812.731941] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1812.737575] ? security_file_ioctl+0x94/0xc0 [ 1812.741990] ksys_ioctl+0xa9/0xd0 [ 1812.745435] __x64_sys_ioctl+0x73/0xb0 [ 1812.749323] do_syscall_64+0x1b9/0x820 [ 1812.753227] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1812.758579] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1812.763495] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1812.768328] ? trace_hardirqs_on_caller+0x310/0x310 [ 1812.773394] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1812.778429] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1812.783437] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1812.788287] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1812.793486] RIP: 0033:0x457569 [ 1812.796675] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:56:23 executing program 2 (fault-call:5 fault-nth:45): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1812.815579] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1812.823290] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1812.830544] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1812.837810] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1812.845102] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1812.852375] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1812.927503] FAULT_INJECTION: forcing a failure. [ 1812.927503] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1812.939615] CPU: 0 PID: 18028 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1812.946880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1812.956220] Call Trace: [ 1812.958816] dump_stack+0x1c4/0x2b6 [ 1812.962449] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1812.967641] ? graph_lock+0x170/0x170 [ 1812.971485] should_fail.cold.4+0xa/0x17 [ 1812.975571] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1812.980679] ? graph_lock+0x170/0x170 [ 1812.984471] ? graph_lock+0x170/0x170 [ 1812.988265] ? percpu_ref_put_many+0x11c/0x260 [ 1812.992834] ? lock_downgrade+0x900/0x900 [ 1812.996982] ? check_preemption_disabled+0x48/0x280 [ 1813.002024] ? __lock_is_held+0xb5/0x140 [ 1813.006167] ? fat_alloc_clusters+0x130/0x16f0 [ 1813.010751] ? ___might_sleep+0x1ed/0x300 [ 1813.014979] ? lock_release+0x970/0x970 [ 1813.019379] ? arch_local_save_flags+0x40/0x40 [ 1813.023955] ? __lock_is_held+0xb5/0x140 [ 1813.028055] ? __might_sleep+0x95/0x190 [ 1813.032034] __alloc_pages_nodemask+0x34b/0xde0 [ 1813.036700] ? lock_downgrade+0x900/0x900 [ 1813.040852] ? check_preemption_disabled+0x48/0x280 [ 1813.045856] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 1813.050875] ? kasan_check_read+0x11/0x20 [ 1813.055031] ? graph_lock+0x170/0x170 [ 1813.058847] ? rcu_bh_qs+0xc0/0xc0 [ 1813.062400] ? check_preemption_disabled+0x48/0x280 [ 1813.067421] ? check_preemption_disabled+0x48/0x280 [ 1813.072459] ? __lock_is_held+0xb5/0x140 [ 1813.076550] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1813.082099] alloc_pages_current+0x10c/0x210 [ 1813.086515] __get_free_pages+0xc/0x40 [ 1813.090393] mmu_topup_memory_caches+0x1ee/0x390 [ 1813.095157] kvm_mmu_load+0x21/0xfa0 [ 1813.098883] vcpu_enter_guest+0x3dbe/0x6380 [ 1813.103214] ? emulator_read_emulated+0x50/0x50 [ 1813.107878] ? vmx_vcpu_load+0xb06/0x1030 [ 1813.112019] ? vmx_write_tsc_offset+0x680/0x680 [ 1813.116689] ? graph_lock+0x170/0x170 [ 1813.120513] ? lock_downgrade+0x900/0x900 [ 1813.124658] ? check_preemption_disabled+0x48/0x280 [ 1813.129669] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1813.135215] ? check_preemption_disabled+0x48/0x280 [ 1813.140226] ? check_preemption_disabled+0x48/0x280 [ 1813.145254] ? __lock_is_held+0xb5/0x140 [ 1813.149316] ? lock_acquire+0x1ed/0x520 [ 1813.153278] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1813.158301] ? lock_release+0x970/0x970 [ 1813.162275] ? kvm_gen_update_masterclock+0x350/0x350 [ 1813.167467] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1813.171974] ? preempt_notifier_dec+0x20/0x20 [ 1813.176493] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1813.181344] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1813.186368] kvm_vcpu_ioctl+0x72b/0x1150 [ 1813.190435] ? kvm_vcpu_block+0x1030/0x1030 [ 1813.194750] ? find_held_lock+0x36/0x1c0 [ 1813.198820] ? __fget+0x4aa/0x740 [ 1813.202282] ? check_preemption_disabled+0x48/0x280 [ 1813.207308] ? kasan_check_read+0x11/0x20 [ 1813.211462] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1813.216729] ? rcu_bh_qs+0xc0/0xc0 [ 1813.220264] ? __fget+0x4d1/0x740 [ 1813.223720] ? ksys_dup3+0x680/0x680 [ 1813.227444] ? find_held_lock+0x36/0x1c0 [ 1813.231517] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1813.236466] ? kvm_vcpu_block+0x1030/0x1030 [ 1813.240789] do_vfs_ioctl+0x1de/0x1720 [ 1813.244663] ? __lock_is_held+0xb5/0x140 [ 1813.248727] ? ioctl_preallocate+0x300/0x300 [ 1813.253140] ? __fget_light+0x2e9/0x430 [ 1813.257106] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1813.262635] ? smack_file_ioctl+0x210/0x3c0 [ 1813.266951] ? fget_raw+0x20/0x20 [ 1813.270395] ? smack_file_lock+0x2e0/0x2e0 [ 1813.274624] ? __sb_end_write+0xd9/0x110 [ 1813.278678] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1813.284207] ? fput+0x130/0x1a0 [ 1813.287487] ? do_syscall_64+0x9a/0x820 [ 1813.291472] ? do_syscall_64+0x9a/0x820 [ 1813.295451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1813.300994] ? security_file_ioctl+0x94/0xc0 [ 1813.305395] ksys_ioctl+0xa9/0xd0 [ 1813.308838] __x64_sys_ioctl+0x73/0xb0 [ 1813.312722] do_syscall_64+0x1b9/0x820 [ 1813.316613] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1813.321985] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1813.326918] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1813.331762] ? trace_hardirqs_on_caller+0x310/0x310 [ 1813.336775] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1813.341784] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1813.346802] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1813.351655] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1813.356854] RIP: 0033:0x457569 [ 1813.360034] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:56:24 executing program 2 (fault-call:5 fault-nth:46): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1813.378960] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1813.386680] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1813.393959] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1813.401236] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1813.408508] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1813.415781] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 [ 1813.492155] FAULT_INJECTION: forcing a failure. [ 1813.492155] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1813.505054] CPU: 1 PID: 18037 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1813.512356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1813.521711] Call Trace: [ 1813.524293] dump_stack+0x1c4/0x2b6 [ 1813.527952] ? dump_stack_print_info.cold.1+0x20/0x20 [ 1813.533149] ? graph_lock+0x170/0x170 [ 1813.536967] should_fail.cold.4+0xa/0x17 [ 1813.541038] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 1813.546144] ? graph_lock+0x170/0x170 [ 1813.549954] ? graph_lock+0x170/0x170 [ 1813.553745] ? percpu_ref_put_many+0x11c/0x260 [ 1813.558330] ? lock_downgrade+0x900/0x900 [ 1813.562487] ? check_preemption_disabled+0x48/0x280 [ 1813.567537] ? __lock_is_held+0xb5/0x140 [ 1813.571642] ? ___might_sleep+0x1ed/0x300 [ 1813.575795] ? lock_release+0x970/0x970 [ 1813.579802] ? arch_local_save_flags+0x40/0x40 [ 1813.584389] ? __lock_is_held+0xb5/0x140 [ 1813.588457] ? __might_sleep+0x95/0x190 [ 1813.592438] __alloc_pages_nodemask+0x34b/0xde0 [ 1813.597455] ? lock_downgrade+0x900/0x900 [ 1813.601607] ? check_preemption_disabled+0x48/0x280 [ 1813.606631] ? __alloc_pages_slowpath+0x2d70/0x2d70 [ 1813.611652] ? kasan_check_read+0x11/0x20 [ 1813.615796] ? graph_lock+0x170/0x170 [ 1813.619605] ? rcu_bh_qs+0xc0/0xc0 [ 1813.623159] ? check_preemption_disabled+0x48/0x280 [ 1813.628178] ? check_preemption_disabled+0x48/0x280 [ 1813.633193] ? __lock_is_held+0xb5/0x140 [ 1813.637270] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 1813.642816] alloc_pages_current+0x10c/0x210 [ 1813.647247] __get_free_pages+0xc/0x40 [ 1813.651142] mmu_topup_memory_caches+0x1ee/0x390 [ 1813.655916] kvm_mmu_load+0x21/0xfa0 [ 1813.659663] vcpu_enter_guest+0x3dbe/0x6380 [ 1813.664019] ? emulator_read_emulated+0x50/0x50 [ 1813.668720] ? vmx_vcpu_load+0xb06/0x1030 [ 1813.672890] ? vmx_write_tsc_offset+0x680/0x680 [ 1813.677584] ? graph_lock+0x170/0x170 [ 1813.681394] ? lock_downgrade+0x900/0x900 [ 1813.685569] ? check_preemption_disabled+0x48/0x280 [ 1813.690596] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1813.696126] ? check_preemption_disabled+0x48/0x280 [ 1813.701150] ? check_preemption_disabled+0x48/0x280 [ 1813.706192] ? __lock_is_held+0xb5/0x140 [ 1813.710270] ? lock_acquire+0x1ed/0x520 [ 1813.714266] ? kvm_arch_vcpu_ioctl_run+0x234/0x16e0 [ 1813.719304] ? lock_release+0x970/0x970 [ 1813.723289] ? kvm_gen_update_masterclock+0x350/0x350 [ 1813.728971] ? kvm_arch_dev_ioctl+0x630/0x630 [ 1813.733474] ? preempt_notifier_dec+0x20/0x20 [ 1813.737993] kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1813.742850] ? kvm_arch_vcpu_ioctl_run+0x375/0x16e0 [ 1813.747894] kvm_vcpu_ioctl+0x72b/0x1150 [ 1813.751980] ? kvm_vcpu_block+0x1030/0x1030 [ 1813.756317] ? find_held_lock+0x36/0x1c0 [ 1813.760392] ? __fget+0x4aa/0x740 [ 1813.763870] ? check_preemption_disabled+0x48/0x280 [ 1813.768909] ? kasan_check_read+0x11/0x20 [ 1813.773077] ? rcu_dynticks_curr_cpu_in_eqs+0x9f/0x160 [ 1813.778367] ? rcu_bh_qs+0xc0/0xc0 [ 1813.781944] ? __fget+0x4d1/0x740 [ 1813.785423] ? ksys_dup3+0x680/0x680 [ 1813.789151] ? find_held_lock+0x36/0x1c0 [ 1813.793231] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 1813.798175] ? kvm_vcpu_block+0x1030/0x1030 [ 1813.802509] do_vfs_ioctl+0x1de/0x1720 [ 1813.806412] ? __lock_is_held+0xb5/0x140 [ 1813.810486] ? ioctl_preallocate+0x300/0x300 [ 1813.814960] ? __fget_light+0x2e9/0x430 [ 1813.818957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1813.824506] ? smack_file_ioctl+0x210/0x3c0 [ 1813.828838] ? fget_raw+0x20/0x20 [ 1813.832305] ? smack_file_lock+0x2e0/0x2e0 [ 1813.836553] ? __sb_end_write+0xd9/0x110 [ 1813.840628] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1813.846173] ? fput+0x130/0x1a0 [ 1813.849465] ? do_syscall_64+0x9a/0x820 [ 1813.853452] ? do_syscall_64+0x9a/0x820 [ 1813.857439] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1813.862993] ? security_file_ioctl+0x94/0xc0 [ 1813.867418] ksys_ioctl+0xa9/0xd0 [ 1813.870889] __x64_sys_ioctl+0x73/0xb0 [ 1813.874805] do_syscall_64+0x1b9/0x820 [ 1813.878716] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1813.884094] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1813.889035] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1813.893887] ? trace_hardirqs_on_caller+0x310/0x310 [ 1813.898910] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1813.903961] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1813.908994] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1813.913852] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1813.919044] RIP: 0033:0x457569 [ 1813.922246] Code: fd b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1813.941248] RSP: 002b:00007fcc895e6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1813.948976] RAX: ffffffffffffffda RBX: 00007fcc895e6c90 RCX: 0000000000457569 [ 1813.956255] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 1813.963538] RBP: 000000000072bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1813.970821] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcc895e76d4 [ 1813.978106] R13: 00000000004c0027 R14: 00000000004d0108 R15: 0000000000000006 03:56:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:25 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:25 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) 03:56:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 03:56:25 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 03:56:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 03:56:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:26 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 03:56:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 03:56:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 03:56:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 03:56:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 03:56:26 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 03:56:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 03:56:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:27 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) 03:56:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 03:56:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 03:56:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 03:56:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 03:56:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 03:56:27 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 03:56:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:28 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) 03:56:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:30 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:30 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 03:56:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) 03:56:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 03:56:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 03:56:30 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) 03:56:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 03:56:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0xffffffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xec0f00) 03:56:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:31 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:31 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x400000000000000) 03:56:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x9000000) 03:56:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500000000000000) 03:56:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) 03:56:31 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 03:56:32 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 03:56:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18) 03:56:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:34 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:34 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900000000000000) 03:56:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffe0) 03:56:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 03:56:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 03:56:34 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc) 03:56:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00000000000000) 03:56:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:35 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8) 03:56:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:37 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 03:56:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:37 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff) 03:56:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803) 03:56:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0ff) 03:56:37 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffe0) 03:56:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) 03:56:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 03:56:38 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 03:56:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x1f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 03:56:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x29000000) 03:56:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11) 03:56:38 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x200000000000000) 03:56:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 03:56:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 03:56:39 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 03:56:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) 03:56:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x900) 03:56:41 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 03:56:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2900000000000000) 03:56:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 03:56:41 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 03:56:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800) 03:56:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) 03:56:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:42 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:42 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700000000000000) 03:56:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:44 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x231860) 03:56:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x800000000000000) 03:56:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100008000000000) 03:56:44 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xec0f0000000000) 03:56:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 03:56:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7fcc895e7700) 03:56:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffff) 03:56:45 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5) 03:56:45 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e8) 03:56:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00000000000000) 03:56:45 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x60182300) 03:56:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 03:56:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) 03:56:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfffffdfd) 03:56:46 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000) 03:56:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00000000000000) 03:56:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0ffffffffffffff) 03:56:46 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 03:56:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000) 03:56:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 03:56:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfec00) 03:56:47 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x9) 03:56:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:47 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0ffffff) 03:56:47 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffe0) 03:56:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00) 03:56:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0) 03:56:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 03:56:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 03:56:48 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) 03:56:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300000000000000) 03:56:48 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) 03:56:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) 03:56:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 03:56:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) 03:56:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) 03:56:49 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:49 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x775e89cc7f0000) 03:56:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000) 03:56:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:51 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) 03:56:51 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x6018230000000000) 03:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000080) 03:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) 03:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 03:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2900) 03:56:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x29) 03:56:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:52 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) 03:56:52 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000000)={0x6000, 0x8000}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000140)=[@cr0={0x0, 0x2}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x1, 0x82) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') getsockopt$inet6_mtu(r3, 0x29, 0x17, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$bt_BT_FLUSHABLE(r3, 0x112, 0x8, &(0x7f0000000180)=0xfffffffffffffff8, 0x4) 03:56:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000000), 0xb3) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000000)={0x3f}) 03:56:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:53 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:53 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:53 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xffffffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:53 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0x7, &(0x7f0000000080)={0x4, 0x10000, 0x81, 0x8}, 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) truncate(&(0x7f00000000c0)='./file0\x00', 0x0) 03:56:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x20000, 0x0, [0x400, 0x8, 0x0, 0x1f, 0xffffffff7fffffff, 0x400, 0xffffffff, 0x9]}) 03:56:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x1fffc, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000480)=""/140) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) write$eventfd(r3, &(0x7f0000000080)=0x49, 0x8) 03:56:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x8000, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r3, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:56:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:54 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ppoll(&(0x7f0000000000)=[{r2, 0x20}], 0x1, &(0x7f0000000080), &(0x7f00000000c0)={0x100}, 0x8) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:54 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x480, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fsetxattr$security_smack_transmute(r2, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x2) 03:56:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) socketpair(0x12, 0x8080b, 0x80, &(0x7f0000000000)) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 03:56:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x44840, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_X86_SET_MCE(r2, 0x4040ae9e, &(0x7f0000000000)={0xc00000000000000, 0x4, 0x1ff, 0xb, 0x7}) 03:56:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fffffdfd00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000080)="baf80c66b8b040088166efbafc0cb80090ef66b9800000c00f326635001000000f30b800008ec866b8000000000f23d00f21f86635000000040f23f80f080f00d9360fc7aaab3a0f0131650f65b700000f20e06635020000000f22e0", 0x5c}], 0x1, 0x4, &(0x7f0000000180)=[@cr0, @cstype3={0x5, 0x6}], 0x2) r3 = dup2(r2, r0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000000)) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000081", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:55 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:55 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x500, 0x0) ioctl$KDGKBLED(r0, 0x4b64, &(0x7f0000000080)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:56:55 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, &(0x7f00000000c0)=0x80, 0x80800) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000240)=0x6, 0x4) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) socketpair$unix(0x1, 0x20000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = memfd_create(&(0x7f00000000c0)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) write$binfmt_script(r4, &(0x7f0000000140)=ANY=[@ANYBLOB="3a02"], 0x2) clone(0x20002100, 0x0, 0xfffffffffffffffe, &(0x7f0000000380), 0xffffffffffffffff) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x1, 0xffffffffffffffff) execveat(r4, &(0x7f0000000000)='\x00', &(0x7f0000000480), &(0x7f0000000300), 0x1000) clock_nanosleep(0x0, 0x0, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x40, 0x0) ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0xc) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r5, &(0x7f000000b000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="c4e2e1bb4d329a7d20fba4b900c4e11c5dcd9a000000004e00b9800000c00f3235001000000f30c4c1cd657f000f32f30f5a11ea0500000022000f01c8", 0x3d}], 0x1, 0x2, &(0x7f0000000080)=[@vmwrite={0x8, 0x0, 0x7fffffff, 0x0, 0xffffffffffffffff, 0x0, 0xfbc, 0x0, 0x4}, @cstype0={0x4, 0xf}], 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:56:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$UFFDIO_WAKE(r1, 0x8010aa02, &(0x7f0000000000)={&(0x7f0000004000/0x2000)=nil, 0x2000}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 03:56:56 executing program 2: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x1f, 0x0, 0x6}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x92, 0x3, 0x8, 0x10000, 0x3ff, 0xa38a, 0x20, 0x200000000000000, r1}, &(0x7f0000000280)=0x20) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) r5 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000740)={0x4, 0x0, [{0x0, 0xd0, &(0x7f0000000380)=""/208}, {0x3004, 0x73, &(0x7f0000000480)=""/115}, {0x1000, 0x82, &(0x7f0000000500)=""/130}, {0xd000, 0xf4, &(0x7f0000000640)=""/244}]}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYBLOB="0066090200"], &(0x7f0000000340)=0x14) ioctl$IOC_PR_RELEASE(r5, 0x401070ca, &(0x7f0000000080)={0xffffffff, 0x81, 0x1}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:56:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:56 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={0xffffffffffffffff, 0x10, &(0x7f0000000000)={&(0x7f0000000240)=""/207, 0xcf, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000000c0)=r3, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:56 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:56 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$KVM_GET_NESTED_STATE(r2, 0xc080aebe, &(0x7f0000000640)={0x0, 0x0, 0x2080}) socket$l2tp(0x18, 0x1, 0x1) getsockopt$inet_buf(r2, 0x0, 0x25, &(0x7f0000000080)=""/95, &(0x7f0000000000)=0x5f) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:56 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x1ff, @empty, 0x80}, 0x1c) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7, 0x2000) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000080)) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:56:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200000, 0x0) connect$can_bcm(r3, &(0x7f0000000040), 0x10) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, &(0x7f0000000140)="3e0f8fa300f0f613baf80c66b8928fd98a66efbafc0cb80000efbaf80c66b8108d448066efbafc0c66b8c100000066efbad00466ed0f070f23e20f070f01cb0f3808ae70fd"}], 0x1, 0x0, &(0x7f00000000c0)=[@flags={0x3, 0x80800}], 0x1000000000000015) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) shutdown(r3, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000080)=[@cr0, @cr0={0x0, 0x80000000}], 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x800000000000) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000780)=[{{&(0x7f0000000080)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000140)=""/121, 0x79}, {}], 0x2, &(0x7f0000000280)=""/202, 0xca, 0x6831}, 0xffffffffffffffff}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)=""/249, 0xf9}, {&(0x7f0000000480)=""/114, 0x72}, {&(0x7f0000000500)=""/133, 0x85}], 0x3, &(0x7f0000000680)=""/63, 0x3f, 0x7}, 0x1}, {{&(0x7f00000006c0)=@sco, 0x80, &(0x7f0000000740), 0x0, 0x0, 0x0, 0x4}, 0x3}], 0x3, 0x160, &(0x7f0000000840)={0x0, 0x989680}) accept(r3, 0x0, &(0x7f0000000880)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:57 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:57 executing program 2: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x0, 0x0) write$FUSE_INTERRUPT(r0, &(0x7f0000000140)={0x10, 0x0, 0x2}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) r4 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x503000, 0x0) ioctl$DRM_IOCTL_MODESET_CTL(r4, 0x40086408, &(0x7f0000000080)={0x35, 0xffffffffffffffc0}) ioctl$KVM_RUN(r3, 0xae80, 0x0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000280)={0x0, 0x37, "b7ed88cf53b8601e16a802e8fb531057801b3cbeb48a6a0faa5619dadafab31a754e7e10fcb649fb368f44c9ec3887263aede344ec8451"}, &(0x7f00000002c0)=0x3f) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000300)={r5, 0x1}, &(0x7f0000000340)=0xc) 03:56:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:57 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$UI_SET_LEDBIT(r0, 0x40045569, 0xa) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000008000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000140)="b93a1001c00f320f0766bad004b84d639f20ef66660f3820b5bb0000009a3e393b853301b8010000000f01c1b8320000000f23d80f21f835800000600f23f8360f01d10fc76b91c4c1fd597313"}], 0xaaaaaaaaaaaab87, 0x0, &(0x7f00000000c0), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) bind$can_raw(r0, &(0x7f0000000080), 0x10) 03:56:57 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x0, 0x1000000000000, 0x0, 0x0, 0x3]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000000)=[@textreal={0x8, &(0x7f0000000080)="260f2292660fde6d000f20e06635200000000f22e067260f017a0e440f20c0663502000000440f22c066b95c0b00000f3201970020baf80c66b882f1398766efbafc0cecba4000b000ee66b9800000c00f326635004000000f30", 0x5a}], 0x1, 0x40, &(0x7f0000000140)=[@cstype3={0x5, 0xb}], 0x1) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000240)={0x1ffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff]}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x201, 0x0) connect$bt_l2cap(r3, &(0x7f00000001c0)={0x1f, 0x8, {0x0, 0x5, 0x3f, 0x8, 0x4, 0x9}, 0x5, 0x10001}, 0xe) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mlock(&(0x7f0000005000/0x2000)=nil, 0x2000) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffffffffffffc) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.stat\x00', 0x0, 0x0) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x4000}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000240)=""/221) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:56:58 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x141000, 0x0) getpeername$unix(r2, &(0x7f0000000080), &(0x7f0000000140)=0x6e) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000]}) ioctl$KDSETLED(r2, 0x4b32, 0x7fff) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000280)={[{0x7, 0x0, 0x0, 0x3ff, 0x0, 0xf8f9, 0xc9, 0x8, 0x7fff, 0x80000000, 0x7, 0x6, 0x101}, {0x2b6, 0x7ff, 0x0, 0x800, 0x2, 0x1000, 0x194ad0a5, 0x0, 0xfffffffffffffffe, 0xfff, 0x5, 0x7, 0x1}, {0x400, 0x80000001, 0x0, 0x200, 0x101, 0x0, 0x5e, 0x0, 0xa129f8, 0x1, 0x3f, 0x1000, 0x6}], 0x81}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000300)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@loopback}}, &(0x7f0000000040)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) write$FUSE_ATTR(r2, &(0x7f0000000440)={0x78, 0x0, 0x8, {0x10000, 0x9, 0x0, {0x0, 0x8, 0x1, 0x8, 0x40, 0x2, 0x4, 0x8, 0x7, 0x3, 0xffffffffffffffff, r4, r5, 0xff, 0xff}}}, 0x78) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:56:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:56:58 executing program 2: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = openat(0xffffffffffffffff, &(0x7f00000000c0)='./file0\x00', 0x20000, 0x40) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x5, 0x2000, &(0x7f0000013000/0x2000)=nil}) getsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000180)={0x0, 0x0, 0x1, 0xffffffffffffff13}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000280)={0x7, 0x200, 0x7f, 0xff, r1}, 0x10) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x80000, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0xaaaaaaaaaaaad83, 0x0, &(0x7f0000000140)=[@vmwrite={0x8, 0x0, 0x800, 0x0, 0x1f, 0x0, 0x80000000, 0x0, 0xff}], 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:56:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:00 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000080)={r3}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl(r2, 0xffff, &(0x7f0000000640)="e61781267bfe7303b09b2cc88f475ca8ada85f6c82cee6bc3d7bde734505f97878aa4b7cf6edbb2883f39440cb1cbd41b7e2bdc04246c4a930623a0d6c3d17578fed2b554c20a33432e97a8a12b7202c65b09120eeb87116a39a1f05aa71dcfd379168a1970e338d950117e080353a35db1809cb7f55d6a734efc99b9cfeed5bbf540aaca660a71251dbb304cd5cbc2d03787d61b9a989984fea6c0da6aff007920a37430da7777c324abbe1d44c4f2dd32335d8e3001f315843a0ae031310e8b1999b19ea7e426a0ae936493d151b00f73ded31b1cca1758dff64be93b7391ca8a2b53601b6f2a2dab4c772ed76b7baa17dc4dbc31da259fe514247f3931f38a70e2686cd913c8ace21d232a16b3e89c800445b7a44a5225bb13a87a634e85077b47eaf6bd60de9d2ff9b56388eaf7ab5282f4282e490c6ee08930519b159cba5e5dd1e50e325c85316a6defb18bdedb08c2ea81cd19e5c47e45510854ae6ffa82851e6ade5286d7e8d25295b21ce90f345d834076f0fe2438796c11a1bb7130445e074974aed92e78ce7c0c9e1499f3fc7377e6f5d133b159ca4e912ba2785b8cc4d0bad2f012c9a23e45291a27affd50512c0ef9c5da28e6cb22139ac4e88c8adbc21644d8262dcf81340d0f67face51729f8489f85527fa001ff7963289ebb7b131653e58aef5f1803fb96a93fb7d02694e59f1c46742601deb83a8b0e75013335cf51ef618f30c5fb6bf82ee89e1428b292fe0d045720a40777da58712c655ae305eae199c6e3e4ffad5f0b0d0240b2efb6859c780b47532ca84c4b64be2028a1d21de8fbee0d50c87ee9c031e6b57032907f626dcc184dd774d8285ca30431b3a9a68fd54ff874ade558e1f293a70794d3b593a266e85d006a2e5599463b3fc2ce21c39893d5d8c862ded85c6ef5c20623bb5cf41df4219954fde039d98c6a1c839f139145258f26b7a132e78c364aed3cc31e46a4c7ba298fc46ea0b2903ea6a9cf222af3a4a54c325774e129a1d1783c773bf4b752a693b03ebe523f01f0c3d059efb1d62d32a5ce5c36912b1738dccdbfdd7edad9cc25a9ab86b1d1c1076aa18c169878bee2e3b30589b9e199370c18d07020bad3d073ff7f09169938b0429d1041780f4156ed448cf659686a528c95d18c5626c548a393659928b6a4f5e8f06d773e53c00fc5191e0405053ce40465f0bf42fa3f4f98bc1209f9d9f4dbf70021bbec3bedea7f78df17b124a4488d2dee4bb2310032fb541940316a4826b700aac37d746684b439f9decf4f6f6a8144b2b28a879b68dde11438a40154d2e05606e02447349b00956dbbceea66bb1238553d6fd82a7aa0ab0188318fb587319b21ec8bc532ece385b092ff93f76872ae19de046d7b3a67664d0e87e66f8246108764cddc443a665d91885d9106386e332d6d2bc772d11cb78983bc49f864448afcc10918fdbd1eb74b268586d7d3c8593eeab927e470031d605312818e5558706553d3fdb2e61044f5feb6fcb162a88b3c9593f8af425666a7b49514e47d68df7a5c7bb63ec8433a3ca550f8dc39db880cb3eb65549fc8ffa52d7a063971b45554524f72c03bbb91ebfaa70e01a76ef50e25130ce0f4615ad15044177f884e770e87129616ffdf5b5f2643721c38dc3c9d22cfc4c8922c00845e9cef78103d9f2caea197d864e7c7a2461f5a72876260b873ac3c950b0fd8bdc95ed31b1964b9c82a8c674dd760f98df41cd9964a5be62ec3537422335712da4ad93ad2b9379372b172d946439d463faa7d7ca875a5016d7b82c2fdde8e643ecb61eafc23bc0d46bfb350579988beea7010f294e5a008a84266d0d2274de225ebd816c57e7d977c68dd5dcd30a25b91427cb3530792cfab5a0a25a446964f02473db7ed7532027bee6cc02b5511b29d39e0ac4dc14a28bcf93655826371efc0ed77120046db679ea52caa473753cd895e0e133e458984c6750d2243343a3a9b0294dfbe44457f3787345562cd39ed512ab8ae690b1d200365add7deb99345f487dde76804284ab3dc758fd38dab4b058a64d8d37c752e5e6ea9e1e67021f9d09c1f14366988831ba5af9a271484eef06fee021ba84652057b5c8d9a482b793abe5e65ff4d4a05a9ac38b9f8d66c51f0a99948a554fee946fc380e422325b27ee3abd24e89ccabe291c3b65dfd73fb1f0cb5c8a50f5b114bb698ddcbf8458a471cffc579c580c2f5330798bdb5acfd75247fd07f372c967681d658983597f0691928ec3699181a3479364e5f0ba428d860d944f05ba8606fa6b6df92470c9a365982d810914b47eac6113413a01bbd1546744ee6c8a01a5157cc101b4b54b3209be09c6996b6eed79972c00954782f3852ff464167d08214ca7fe497b934e1a1e63f9d2cd2eb987c7f1ceba022f3cfea4580b921438c35fd9f41ca2e9b8c50787f909e4987d2c980aee1691ca1020cf377aa21bca45f96a82fb18f8f886f563f34866d8b6a2055d91711728d79a38aa07d307a9ddc89e7287970004b25d7f1af8d991259e3f32b97e793107229ebc8f89e3d1e59b1e9851f8fce58c26dd631c47edfd1e10ac8243cd81ee5b42bf1d27e63f5950fd4acaf8648a82acb15c886474e5f518ab6cb9f47e85b1c9c357bd69ae796d061db9b8596b63c332cee6fe2f43a4ad667ac69ef1f22f60d791b06f70a464b17beb19af38a5097e35b608340a9ee5d39cc63601d822eb49a41bda6e6f59d4f33a4fc666248e1bf1706a0a47b777609ecbc74694b71818aaa39a86cd11a81938d5e77fba791b3d49e4f1211b4bd61578000fdaa2bdb29498902816816af8793cee3d20c993e8ed0259d56dc9e0f885768660123961ddd84145dc875c081f8e3f079a88a24bb87eef02c20bf98127d65997fc5263dc39e08448ef771dd7b14656d8fcf11529a40c87a819422bc6417b27488e234042acf2af56d475bc7a0b381fb79285ccd9f9865b82de0a42c90dcc8f5e35ada565bbe02a0013866b930e19704a688a0119b80f69e40c1e8faba46b9e5592d877e16596d9a31a0ea8feea902f0e5c3beb5a6b8ffc206bea54d13090cc5dc3f748f2791e85499075df86528bedd71f9f9d69e59874dcfd8ae10001e8985ccbc169adc7f301f22abc97cdb51bbfa4865d5d8f127611df24642a22b9d5aa41fa9bee56ea2e7e83f6acf27fb32af3e49a117fc83a83a64d5573489b18f23fc659ac1e333b14ed979168615f00ecf99cf368338609dc11ccd91aa17a6c09510c3644107a3d7728f121fefaadd923787dc0cfb24dc056936e01a48e95d0cb2aef5629892007baae51c84a116340e396e18e878dd34db5eb97ddc9d9afc27200c669a7d36e5b00af232d16a45a9c15665d26d4103cfccbf4dc6d9291646caf3f0e899b338f92f9069c82c8ae098f865139643b3a60de5b22f0708d1ae0ece7ae3faaee7fa8dc49db4edf79023b1099f1b9a89eefad7cfbcb469618ea547c47a49933c9841bef97623824aaf49f896eeea616841ac5118b35d0d928dbdb6262722a7b254f5fbe835da39f93d4de977b41855b99d493505864348c3ab7916586b7ca1aabe9a2a38427b227b3d2a2601c2c7f8cbfc0ac5f2c955791d92fe8bfafb8b0e3881f4baeb48fbc43963c499394ef387be0cd2bb7876c2a124d4ad0b351338848637d74d268e6bb84931f770f0da968101fbd720d0a0473cf823b09f8b769f703c7f96bab9efbc82f39c1e93df179ab5f0be39bdd4a03612f16a7dc30f5ad62bf8aa05a1d7114d4537b6a42bab3782bff9ec4d79c2a912fdebe8eef84b6cedf5ca48dd7537da1f7763cf726190caf40b577b8692f27dcb94922321007aff837574df4ab9d970bdedd01bbf86dec920d1344e34c1b597b6e56b456a8fb27b4818e8e65806bfb2e4fdf7217b66b8160de56567fbadfbaa3b98de465157f53c9157c948c4da1e591f4ba5bc10a1d535dd769b805cf3b2851154d18c3d48af868f840e66d889f512eb00429a6d5047f443f0e311731c1b093a4107dc8e62f4dd6d9d46a47a75a360b52d714ccfdfbb735dd99c82bb7f878a64c2edd2e28694ec403043e42e896eaa1a5ec30d13be6e2546d5f474e0347cd5bd4d2c0b42df28efdbfef6f862103063b356029b4710fa9637e2271c870b0a0ef1688d2113b0dd5a2de4588becc923a8c6979e011cfd32ba85d56ea87cb9d4f158fb14fdcb99829c308e898d61379de5af9cffd8cde357e0d1f1b778ae177827379616e761897aceb1ba846d4863521e5fe2704bde63f4c5118bcc8ef43db8efbaedcea6304ae19b11bbcd5ff4c04aaf98332902f85bf710d61a46c4209497d3c381da4b03d51c1ec91a0edc3f5569d6085c031a85d4379ae7f7c5bbb8f13c52207d8d00509478699bf544d90c5c51f542337f54c505160c33263a8fda80fbe6a979d8ea62284b3815079736adf4c203ade0ff17f8e4495ce40c2d4da92152c42437f0c2990eb9f9337f57e92ecb7c7799f6b0f1a57c2e1c779a0bc9b3da87f304d82bafa77d23321abd1afe6aad9a76c73a998591038b73dc2ee030acbd696be4bfba4ea1a773d12ac154056335a990734b973390abb11c52204dc24b35d8d3f8a1067d9bdc3e2d0cca9bbd1a8628c56d6e4dbb120dc1fd8eaba6d2e60b0d641b4acb5e4429d0e2bbdcd3a9042b17d8661dbd4108c014d5a7683754f1e73d15442b574a03725b7a864bf9917df90554c0949c99d1e19e3deffe69439df4ed20bc73a26ea9374f80b3d0de1ec277a4214f179f096608ab854f015c408708078c8e217ad1acbb42a864fd6eff6af9da1b324f35e98c385e28aeb087f4296079d4577e6c3d60a86bd8e0f37305d79f333ec467d15e12e103fde91790ca054ad5b6b9a1d23f53995a9bb9bd3e853f563b3c207624fa8f62f1800cb640d57ef238fe38b40c7c0c26efcca41f130fb91b6884c9a7cdcd0d0fcdbaa71e363439df0a66dea057da13b99a8c1b4919afd37c988b2afa3d4e8d9672750f33e722c824941a2efa8f606cf067eee2e637939b0ab3d3fbba4ce75b76e455b829845062d91d70d37a1b89da8b5d446431f6988b8eccecb24403242d5a532c6b3dc4a8a9f5213cebd77cfe234bb050f7746bb1a6f0134c032cbf80d19efd600c7f5ed25b7b665e0f1ebecf5348a4bc411d605100d1b79fbfb724732ca3cc19c2aac18e9301cd9d9c0c9a38bea9562743bc8dc749933682305b98f211984353d0a6af2bf613f153bb526722f28b4b9ff32ef19d27563f18ea38f698456aa58ec1f34d19053b3de4b5f8608723da9b0688a4edeec940f5e5de38cc05605582d4d8d16dbd300cdf8cbbba6a67dcc7090039ff076500b557a45d8f91fc5741d512262612cc8a5a6f9d6455aae4ccb0c98d32293251cf639a5c54c7802164f864441dc216e35005769893b609ed8fcf480f170c2ee7860c6a90bb6baeac348ba8af65b1f442cd6462c48eb9c19f016b875ff707fbde2ed2bb8eab39938f0be4483ffb9d4752bdb4542f97ce8b04aaa180b83de02963fe7353cc7bcc5fc78f681d4c24787152383de7fccb160227e5871e5264bc3c3e8899568e3239a56b1a5de64626ac002bbc37b4f2f6d3c942296118f623afc471a29a35416b5a5cce2b9d119aa04f6e78a52ee3ce3a6509a2548712098b30f2b812e0566f33eae2edbf810349b70f98174e43144c644b752daecb2e63c84bd7445c644aa4f48d187d48dfc5f218caca0dafd66c104530cfe495b2dd8ecf65ac5223c597901388503947bd31d54473ffb1440761d31061448c4754c40863") 03:57:00 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x200, 0x0) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000080)=0xf8) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:57:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) 03:57:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x6, 0x0) ioctl$PPPIOCGCHAN(r1, 0x80047437, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000240)={0x1ffff, 0x0, [0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0xffffffffffffffff]}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2040, 0x0) write$P9_RREADLINK(r4, &(0x7f0000000080)=ANY=[@ANYBLOB="2504000016010007002e2f66696c6530"], 0x10) 03:57:01 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x400800, 0x0) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000280)=""/141) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x8000, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f0000000140)={0x1, 0x0, [0x100000000, 0xffffffffffffff96, 0x100000001, 0x1, 0x8, 0x0, 0x45, 0x1]}) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x3) r5 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x26f8, 0x400000) ioctl$TUNSETVNETBE(r5, 0x400454de, &(0x7f0000000080)) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:57:01 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x0, 0x10000) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180)=0x8c7, 0x4) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) setsockopt$inet_dccp_buf(r0, 0x21, 0xc, &(0x7f0000000000)="8abb4f0a56a3dac1bc16f9bdb6812a30dbace4408be3c1e8ff3c90348d359bc1c0362c239a76661c0b68", 0x2a) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000c00)={0x3f, &(0x7f0000000240)=""/245, &(0x7f0000000c80)}) fcntl$notify(r2, 0x402, 0x10) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:57:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x2000, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0x9, &(0x7f0000000080)='/dev/kvm\x00'}, 0x30) write$cgroup_pid(r0, &(0x7f0000000140)=r1, 0x12) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x2, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) pipe2(&(0x7f0000000180), 0x80800) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:57:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:01 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:01 executing program 2: add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x3}, &(0x7f0000000240)="056fe59a0974426f50382e340d52ab8d649f8f30f1afeed1bf03517be7fb2a4390cec05ec649d0de63abff03caef0e319fcb96e55758235c50c1a5b5dccfa23840b2eebc9acf06d0b45fbf97946f344154fe181d0a899b6d4578015b271476ba891f1a522b8ace73925b4571e422bff7da704764c69dadefc241fe4b3017086281e2972cc38176f81820672fb8fe19a5868160bc67b08e8993d67a05683d25dd7a53e49e2488aaf7a0694bdb34cfbb23c7d2caf74fa000d7677f461201d74634", 0xc0, 0xfffffffffffffffc) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:01 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) inotify_init() syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000080)={0x0, 0x7}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000240)={r4, @in={{0x2, 0x4e24, @multicast1}}, 0x6, 0x9, 0x1000, 0x400, 0x4}, 0x98) 03:57:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f0000000000)="b805000000b90f0000000f01d9b9910000400f327000d9f066baf80cb8cfd3b788ef66bafc0cec0f01cbc4c1635efcd2ba38a8000066ba2100b00bee0f01c8", 0x3f}], 0xaaaaaaaaaaaac0d, 0x1, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = getpgrp(0xffffffffffffffff) setpriority(0x3, r3, 0x1) 03:57:02 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x20000, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x420000, 0x0) accept$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) r4 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 03:57:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x40, 0x0) openat$cgroup_subtree(r1, &(0x7f0000000300)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000240)=ANY=[@ANYRES32=0x0, @ANYBLOB="a60000004a4c17f3860000000000001000a372160ceeb3fb6307822a3bf7342a45bc4c409f703c981eb3cdd362ed76d24cecc6709057c7323e8021c5669dc75be5a97e71be9b600576f31f021f4ef898126c58d62822de6a208ad4bf106b0493c6c84994f08acfdcd11da4034488849568b36eba649b67b8bec35f01de2b221f0dea212230973c3f11e93294cbad2662c75151cc7700bf7a6fa47c"], &(0x7f00000000c0)=0xae) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000140)={r3, 0x3a9e}, 0x8) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000340)={0x3, 0x6, 0x4, 0xfff, 0x7fff}) 03:57:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x100000001, 0x2) setsockopt$inet_sctp_SCTP_RECVNXTINFO(r3, 0x84, 0x21, &(0x7f0000000180)=0x20, 0x4) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x7f7]}) r3 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000000), &(0x7f0000000080)=0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:02 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:02 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0xc4000, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x28, &(0x7f0000000080)}, 0x10) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000240)="c3e6f505bd61f588903605553d2a87a6ae2ce3040b6257272148316641813c66775facbad8b39d6c610f7d8c2a54ff7dd9e270501b97ae2bb4f0324575e0cdc3a1921f01f9f0382315d99aa32e5015149c2e1b126ad7785d907a021ecc727f649657811b10596a731723594817e53de72175cd8091ba94049f0016409815ad59d339338dc5f26ea33f6ce2573a5258852867a67b742ed62f42e8217e86baa47aceb83301f07c8cf1eb87ffa934b0c7ec621197766f883b8c2aad689185cdb1902b452a1e6e773a1c2ca70437da07ac43e7378b5944ec09f0547e88481a354437e797832bc538459b5ff6437cef7d8b42064f6dc9020d0d", 0xf7}, {&(0x7f0000000340)="20b305cbb63901d6e9d8951a779a87944ce42c556f5019a1511690922005f495c9cc1d87bf78317e08b521b0659cafa6de9919af3ba001df186a7e38b57b97832f8a774c772f1415218239362b7ad9da52f997c6ad44c3600d8fa5764324338030dc394df85536b43546baefcc834a9f9d8a9a4d5ff5f3c611e6c90e332ae98ae2ead794164f7b", 0x87}], 0x2) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:57:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:04 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x100000001, 0x262400) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r3, 0x4004af61, &(0x7f0000000080)=0x1) 03:57:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:04 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x6e, 0x400000) recvmmsg(r2, &(0x7f0000000480)=[{{&(0x7f0000000080)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/163, 0xa3}, {&(0x7f0000000140)=""/126, 0x7e}, {&(0x7f0000000300)=""/64, 0x40}, {&(0x7f0000000340)=""/115, 0x73}, {&(0x7f0000000640)=""/4096, 0x1000}], 0x5, &(0x7f0000000440)=""/48, 0x30, 0x8}, 0xffffffffffff0000}], 0x1, 0x3, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001640)={r3, @in={{0x2, 0x4e20, @rand_addr=0x1}}, 0x3d, 0x8}, &(0x7f0000000540)=0x90) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x0, 0x0, 0x16f, 0x2000000000000]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_kvm_setup_cpu$x86(r1, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r2, 0xc0105303, &(0x7f0000000580)={0x4, 0x101}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x40000, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000380)=ANY=[@ANYRES32=0x0, @ANYBLOB="a7cb026356a879377c9da345163e7e76bc13deae48153b91b2f486f09553cfec4304ed2ec62a480bc43d457375a8d929584a97ecc65a0fa215c4560d6f3b5c64da854181379ed535e06036a25ebf45dfe77b7ccb30007ece69a00acb13be8ada49f5981eff9c16fb468d3adc1108abeead7200ac0b663394dceaa555e0d64095b88c8312d5f74239afb3b80821a35dcd374fd7d4c56d4f2a49a8d17acb4a2152ae357a8dfab179eae7232657c52377f8e6c2811ca4199cbe6e64078b57d4dd8af96dabc1ef63c4934f9e2fada2eae4b812de"], &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x200, @local, 0x6}}, [0x31c, 0xaa, 0x0, 0xfffffffffffffff8, 0x2, 0x1, 0x6, 0x21f63cd2, 0x6, 0x8, 0x5, 0x0, 0xd2, 0x8001, 0x9]}, &(0x7f0000000080)=0x100) getsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={r4, 0xedd}, &(0x7f0000000180)=0x8) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) write$P9_RREADDIR(r3, &(0x7f0000000480)={0x49, 0x29, 0x2, {0x3adc, [{{0x44, 0x4, 0x4}, 0x5, 0xfff, 0x7, './file0'}, {{0x20, 0x1, 0x8}, 0x1, 0x8, 0x7, './file0'}]}}, 0x49) 03:57:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x400000000000000) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x0, 0x90, [0x20000240, 0x0, 0x0, 0x20000270, 0x200002a0], 0x0, &(0x7f0000000080), &(0x7f0000000240)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff}]}, 0x108) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x0, 0x0) getsockopt$inet_tcp_int(r3, 0x6, 0x0, &(0x7f00000000c0), &(0x7f0000000140)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000240)={0xffffffffffffffff}, 0x0, 0x100a}}, 0x20) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000300)=0x100) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f00000002c0)={0x10, 0x30, 0xfa00, {&(0x7f0000000180), 0x4, {0xa, 0x4e22, 0x2, @empty, 0x8}, r4}}, 0x38) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_PKTINFO(r5, 0x10e, 0x3, &(0x7f0000000000)=0x9, 0x4) 03:57:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) mq_open(&(0x7f0000000000)='^\x00', 0x80, 0x4c, &(0x7f0000000080)={0x5, 0xb0, 0xffffffff00000000, 0x0, 0x7, 0x7, 0x100, 0x8}) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:05 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x1ffff, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x34, 0x0, 0x0, 0x0, 0x8001, 0x1]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:05 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:05 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:05 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x8000, 0x0) accept$packet(r3, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) lsetxattr$security_capability(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000140)='security.capability\x00', &(0x7f0000000180)=@v2={0x2000000, [{0x3c23, 0x5}, {0x2, 0x400}]}, 0x14, 0x3) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x44) write$apparmor_current(r3, &(0x7f0000000080)=@profile={'changeprofile ', 'vboxnet1'}, 0x16) syz_kvm_setup_cpu$x86(r3, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x461, 0x0, &(0x7f0000000240), 0x100000000000025c) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:06 executing program 2: r0 = perf_event_open$cgroup(&(0x7f0000000340)={0x0, 0x70, 0x59, 0x3, 0x7f, 0x81, 0x0, 0x0, 0x10000, 0x0, 0x5, 0x40, 0xc2, 0x0, 0xe06, 0x2, 0x2, 0xff80000000000000, 0x7, 0x6, 0x0, 0x4, 0xe2, 0x7f, 0x101, 0xfff, 0x9, 0x1000000000000000, 0x3, 0x2, 0x8, 0x80000001, 0x1, 0x3, 0x7fffffff, 0xfff, 0x1, 0x8, 0x0, 0x4, 0x5, @perf_config_ext={0xffffffffffffffff, 0x8}, 0x80, 0x2, 0x2, 0x7, 0x0, 0x5, 0x7}, 0xffffffffffffffff, 0x2, 0xffffffffffffff9c, 0xe) fcntl$setsig(r0, 0xa, 0xb) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000400)='/dev/zero\x00', 0x2000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000440)={{{@in6=@mcast2, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000d80)=0x1a2) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000dc0)={@dev={0xfe, 0x80, [], 0xb}, 0x24, r2}) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], 0x44a) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000700)=""/176) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vsock\x00', 0x14800, 0x0) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f0000000180)) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$BLKDISCARD(r4, 0x1277, &(0x7f0000000280)=0x2) r5 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x4000) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x5, 0x80000) setsockopt$bt_hci_HCI_DATA_DIR(r5, 0x0, 0x1, &(0x7f00000000c0)=0x5, 0x4) write$selinux_attr(r4, &(0x7f0000000240)='system_u:object_r:framebuf_device_t:s0\x00', 0x27) ioctl$KVM_SET_BOOT_CPU_ID(r3, 0xae78, &(0x7f0000000000)=0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) 03:57:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x8000, 0xe1) r3 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_QUERY(r3, &(0x7f0000000140)={0x13, 0x10, 0xfa00, {&(0x7f0000000240), r4, 0x2}}, 0x18) 03:57:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_GPARAMS(r3, 0x40485404, &(0x7f0000000080)={{0x3, 0x0, 0xfffffffffffffff7, 0x2, 0xfffffffe00}, 0x6549, 0x5}) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:06 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:06 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000002c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f0000000080)="66ba4200b862030000efb9800000c00f3235000800000f30b8010000000f01d90f2385c4e25dbe467666b89c008ec866b833018ed866b8c7008ee80f300fc7a8952e0000", 0x44}], 0x1, 0x0, &(0x7f0000000000)=[@cr4={0x1, 0x100000}, @flags={0x3, 0x10000}], 0x10000068) r3 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vhci\x00', 0x141000, 0x0) getsockopt$bt_hci(r3, 0x0, 0x3, &(0x7f0000000240)=""/66, &(0x7f0000000180)=0x42) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000140)={0x1ffff, 0x0, [0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x2000000000000000, 0x0, 0x6]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x408c00) ioctl$TCSETAW(r3, 0x5407, &(0x7f0000000080)={0x400, 0x9, 0x74df78ae, 0x1, 0x1, 0xa6, 0x401, 0x9, 0x9, 0x3}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = semget$private(0x0, 0x7, 0x9) semtimedop(r2, &(0x7f0000000040), 0x0, &(0x7f0000000280)={0x0, 0x989680}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_GET_NR_MMU_PAGES(r1, 0xae45, 0x550000000) r4 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhci\x00', 0x20000, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180), 0x2, 0x1000}}, 0x20) ioctl$KVM_RUN(r3, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x80, 0x0) 03:57:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) getpeername(0xffffffffffffffff, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, &(0x7f0000000000)=0x80) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ftruncate(r1, 0x1) accept$alg(r3, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0xaaaaaaaaaaaacad, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x400, 0x0) ioctl$TIOCGPTPEER(r3, 0x5441, 0x0) 03:57:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x5, 0x4) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x8000000000000002) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x82) ioctl$EVIOCGBITSW(r3, 0x80404525, &(0x7f0000000240)=""/228) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:07 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x40000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4800) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000240)=""/239) openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x10000, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340)='/dev/kvm\x00', 0x801fc, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x1) ioctl$KVM_SET_GUEST_DEBUG(r4, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0xaaaaaeb, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) ioctl$sock_inet6_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000080)) 03:57:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00?\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:07 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:07 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x109001, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x2, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x0, 0x1, 0x0, 0x0, 0x0, 0x20]}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:08 executing program 2: recvmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={&(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000001640)=[{&(0x7f0000000300)=""/195, 0xc3}, {&(0x7f0000000140)=""/66, 0x42}, {&(0x7f0000000000)=""/12, 0xc}, {&(0x7f0000000400)=""/191, 0xbf}, {&(0x7f00000004c0)=""/100, 0x64}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000540)=""/25, 0x19}], 0x7, &(0x7f0000000580)=""/17, 0x11, 0xa5f0}, 0x10000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000001700)="91a35ae9c4d0854703efb199575f3b59", 0x10) sync_file_range(r0, 0x7ff, 0x2, 0x3) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_IRQCHIP(r2, 0x8208ae63, &(0x7f0000001740)={0x3, 0x0, @pic={0xfffffffffffffffc, 0xb8b, 0x3, 0x3, 0x1, 0x6e7, 0x78c0, 0x5, 0xd4b, 0xd3e, 0xffffffff, 0x4, 0x80000000, 0x80000000, 0x2, 0x1}}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000240)=""/175) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:57:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffff89dd, 0x4800) openat$cgroup_subtree(r1, &(0x7f0000000080)='cgroup.subtree_control\x00', 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:57:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x6, 0x2) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000080)={0x40000, 0x0, [0x3, 0x7, 0x1, 0x768c, 0x1, 0xfffffffffffff9f8, 0x3, 0x6]}) socket$packet(0x11, 0x2, 0x300) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) socketpair(0xf, 0x1, 0x8000, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 03:57:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e743000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000bf00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:08 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x80000) ioctl$TIOCSWINSZ(r1, 0x5414, &(0x7f0000000080)={0x400, 0x7, 0xcb1, 0x15b9}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x0, 0x0, 0x0, 0x0, 0x1]}) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000140)=0x4) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000180), 0x8) 03:57:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r1, 0x8250aea6, &(0x7f0000000080)=""/6) ioctl$KVM_RUN(r2, 0xae80, 0x0) poll(&(0x7f0000000000)=[{r0, 0x80}], 0x20000000000001d1, 0x3) 03:57:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x8) getsockopt(r1, 0x90000000000000, 0x8, &(0x7f0000000140)=""/66, &(0x7f0000000240)=0x42) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) write$uinput_user_dev(r4, &(0x7f0000000640)={'syz0\x00', {0x0, 0x3, 0x100000000, 0x100000000}, 0x26, [0x80000000, 0xa447, 0x1, 0x7fff, 0x9, 0x8, 0x1, 0x3f, 0x0, 0x7fff, 0x9, 0x7, 0x7, 0x2, 0x9, 0xfffffffffffffffc, 0x1, 0x7fff, 0xfffffffffffffff8, 0x69, 0x7fffffff, 0x100000000, 0x7, 0x8001, 0x6, 0x9, 0x94, 0xff, 0x435dcdae, 0x55c, 0x5, 0x1, 0x9, 0x34e, 0xdca6, 0x2, 0x8, 0x9, 0x100, 0x0, 0x2, 0x8, 0x5, 0x6, 0xffffffffffffffff, 0x80000000000000, 0xfffffffffffffff8, 0x81, 0x0, 0x0, 0x3, 0x8724, 0x1e08, 0x5, 0x2, 0x9fc, 0x8001, 0x8001, 0x6, 0x0, 0x4, 0x9, 0x3, 0x9], [0x6f0b, 0xee, 0x5, 0x7, 0x0, 0x5, 0x8, 0x5, 0x3, 0x100, 0x7fffffff, 0x100, 0xd90000000000, 0x100000001, 0x1f, 0xfffffffffffffffd, 0x8, 0x80, 0x9, 0x10000, 0x81, 0x6, 0x1, 0x36, 0xfffffffffffffc00, 0x0, 0x68, 0x5, 0x7, 0xaa, 0x9, 0xfff, 0x5, 0xfffffffffffffff8, 0x0, 0x81, 0x8000, 0x7, 0x2, 0x1, 0x2, 0x3, 0x8, 0x1, 0x0, 0x3, 0x2, 0x3, 0x8000, 0x7ff, 0x1000, 0xe4, 0x3, 0x40, 0x8001, 0x8001, 0x4, 0x3f, 0x3ff, 0x10000, 0x4, 0xf, 0x8], [0x100000000, 0xffff, 0x7ff, 0x1, 0x9, 0x1000, 0x43, 0x3, 0x4, 0x20, 0x7f, 0x7ff, 0x5, 0x80, 0x3f, 0x6, 0xc72c, 0x7, 0x100000001, 0x8, 0x7fffffff, 0x0, 0x7fff, 0x1, 0x10001, 0x6, 0xfffffffffffffeff, 0x1, 0x47f, 0x0, 0x8, 0x9, 0x2c96, 0x100000001, 0x6, 0x10000, 0x3ff, 0x1, 0x7, 0xffffffffffffffaa, 0x8c0, 0x9, 0x85f, 0x9, 0xab, 0x0, 0x80000000, 0x80000000, 0xee0000, 0x101, 0x1, 0x1fb029e8, 0x4, 0x2, 0x81, 0x14, 0x2, 0x1f, 0x2acf, 0x4, 0x2, 0x8001, 0x7, 0xfffffffffffffff9], [0x1f, 0x8, 0x5, 0x100, 0x844c, 0x7, 0xfffffffffffff800, 0x4, 0xdb, 0x1ff, 0x4, 0x9, 0x7, 0x165a, 0x6, 0x10001, 0x8, 0x200, 0x10001, 0x200, 0x1f, 0x6, 0xe68c, 0x7, 0x1, 0x5, 0x8, 0xed, 0x1, 0x10000, 0x2, 0x9, 0x8, 0x1, 0x7fffffff, 0x7f, 0x80000000, 0x0, 0x557, 0x7, 0x6, 0xed6, 0x0, 0x8, 0x1f, 0x6, 0x9f, 0xe70c, 0x6, 0x100000001, 0x0, 0x100000000, 0x7fffffff, 0x6, 0x0, 0x2, 0x5, 0x9, 0x7, 0x5, 0x4, 0x2, 0x9]}, 0x45c) r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7931, 0x2) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000080)={0x4, r5, 0x1}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:57:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2, 0x0) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000080)={0x4, 0x10000, 0x8000}) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r2, 0x111, 0x3, 0x1, 0xffffffffffffff0e) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2000000000000000) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1fffd, 0x0, [0x1f, 0x0, 0x61d, 0x0, 0x0, 0x0, 0x4, 0x4]}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x1306) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r2, 0x84, 0x70, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e20, @broadcast}}, [0x101, 0xfffffffffffff800, 0x4, 0x6a7, 0x9, 0x8, 0xfff000000000000, 0x100, 0xeea4, 0xb0a, 0x8001, 0x4, 0x4, 0x0, 0x1]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@assoc_value={r4, 0x4}, 0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1858.339845] Unknown ioctl 1075359312 [ 1858.356857] Unknown ioctl 1075359312 03:57:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x10000, 0x184) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 03:57:09 executing program 2: r0 = geteuid() r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r2 = syz_open_dev$vcsn(&(0x7f00000016c0)='/dev/vcs#\x00', 0x81, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1f, &(0x7f0000001740)={@ipv4={[], [], @local}, 0x0}, &(0x7f0000001780)=0x14) sendmsg$nl_xfrm(r2, &(0x7f0000001940)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001900)={&(0x7f00000017c0)=ANY=[@ANYBLOB="28010000110000032bbd7000fddbdf25ff020000000000000000000000000001000004d60a003b00080016000300000034001700060000002bbd700027bd700028bd700028bd70000700000000000000fdffffff010000000180000020000000d3000000ac000700fe8000000000000000000000000000aafe8000000000000000000000000000aa4e2007ff4e24f2fd0a00808016000000", @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="ff0300000000000003000000000010009a00000000000000ffffffff00000000020000000000000009000000000000000200000000000000ff0f000000000000080000000003000000000000008100000000000000327f0000be6b6e000200030200000000080018000400000010000a002cbd700029bd700009000000"], 0x128}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r5, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff, 0x0, [0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x4000000000]}) syz_kvm_setup_cpu$x86(r4, r5, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) fcntl$setpipe(r5, 0x407, 0x2) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000080)={0x0, 0x0, [0x1000, 0x200000, 0x9, 0x20]}) 03:57:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, "636c69656e74300000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fdfdffff00", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:09 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_INTERRUPT(r2, 0x4004ae86, &(0x7f0000000000)=0x9) 03:57:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, "636c69656e7430000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008100", 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:09 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00000000000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1858.918688] *** Guest State *** [ 1858.947383] CR0: actual=0x0000000000000031, shadow=0x0000000060000011, gh_mask=fffffffffffffff7 [ 1858.960888] CR4: actual=0x0000000000002060, shadow=0x0000000000000020, gh_mask=ffffffffffffe871 [ 1858.973425] CR3 = 0x0000000000002000 [ 1858.977268] PDPTR0 = 0x00000000000000e7 PDPTR1 = 0x0000000000000000 [ 1858.983870] PDPTR2 = 0x0000000000000000 PDPTR3 = 0x0000000000000000 [ 1858.990509] RSP = 0x0000000000000f80 RIP = 0x0000000000000000 [ 1858.996472] RFLAGS=0x00000102 DR7 = 0x0000000000000400 [ 1859.002580] Sysenter RSP=0000000000000f80 CS:RIP=0050:0000000000002810 [ 1859.010610] CS: sel=0x0030, attr=0x0409b, limit=0x000fffff, base=0x0000000000000000 [ 1859.018623] DS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 1859.026840] SS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 1859.035079] ES: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 1859.043139] FS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 1859.051198] GS: sel=0x0038, attr=0x04093, limit=0x000fffff, base=0x0000000000000000 [ 1859.059718] GDTR: limit=0x000007ff, base=0x0000000000001000 [ 1859.067844] LDTR: sel=0x0008, attr=0x04082, limit=0x000007ff, base=0x0000000000001800 [ 1859.077006] IDTR: limit=0x000001ff, base=0x0000000000003800 [ 1859.085111] TR: sel=0x0000, attr=0x0008b, limit=0x0000ffff, base=0x0000000000000000 [ 1859.093195] EFER = 0x0000000000000001 PAT = 0x0007040600070406 [ 1859.099736] DebugCtl = 0x0000000000000000 DebugExceptions = 0x0000000000000000 [ 1859.107718] Interruptibility = 00000000 ActivityState = 00000000 [ 1859.114073] *** Host State *** [ 1859.117283] RIP = 0xffffffff81212b2e RSP = 0xffff880185bef350 [ 1859.123344] CS=0010 SS=0018 DS=0000 ES=0000 FS=0000 GS=0000 TR=0040 [ 1859.129870] FSBase=00007fcc895c6700 GSBase=ffff8801dae00000 TRBase=fffffe0000003000 [ 1859.137676] GDTBase=fffffe0000001000 IDTBase=fffffe0000000000 [ 1859.143620] CR0=0000000080050033 CR3=00000001887da000 CR4=00000000001426f0 [ 1859.150700] Sysenter RSP=fffffe0000002200 CS:RIP=0010:ffffffff87c013a0 [ 1859.157794] EFER = 0x0000000000000d01 PAT = 0x0407050600070106 [ 1859.163903] *** Control State *** [ 1859.167359] PinBased=0000003f CPUBased=b5986dfe SecondaryExec=000000ca [ 1859.174131] EntryControls=0000d1ff ExitControls=002fefff [ 1859.179687] ExceptionBitmap=0006004a PFECmask=00000000 PFECmatch=00000000 [ 1859.186615] VMEntry: intr_info=80000009 errcode=00000000 ilen=00000000 03:57:10 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8a, 0x2) ioctl$KVM_GET_REG_LIST(r0, 0xc008aeb0, &(0x7f0000000080)={0x6, [0x3f, 0x80000000, 0xcb2, 0x100, 0x80, 0xb275]}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r0, &(0x7f00000000c0)={0x28, 0x2, 0x0, {0x4, 0x2, 0x5}}, 0x28) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r3, 0x4048ae9b, &(0x7f00000001c0)={0x1ffff}) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1859.193378] VMExit: intr_info=00000000 errcode=00000000 ilen=00000003 [ 1859.200621] reason=80000021 qualification=0000000000000000 [ 1859.206934] IDTVectoring: info=00000000 errcode=00000000 [ 1859.212433] TSC Offset = 0xfffffc1a9dfd3dbf [ 1859.216758] EPT pointer = 0x00000001b7c1301e 03:57:10 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f00000001c0)={0x80000}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000002000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f00000005c0)="66b84a008ee80f01c966baf80cb82673488aef66bafc0c66edc441f9108007000000b97b020000b887d9bcbcbaa34904380f302e0f098f891001d866b84d008ec865430ff9f4c4e17c28b8d480f294", 0x4f}], 0x1, 0x0, &(0x7f0000000580), 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4000, 0x0) [ 1859.443528] BUG: unable to handle kernel paging request at ffff8801c85a7000 [ 1859.450660] PGD bc01067 P4D bc01067 PUD 1d9bf9063 PMD 80000001c84001e3 [ 1859.457452] Oops: 000b [#1] PREEMPT SMP KASAN [ 1859.461972] CPU: 1 PID: 20408 Comm: syz-executor2 Not tainted 4.19.0-rc8+ #71 [ 1859.469247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1859.478619] RIP: 0010:mmu_page_zap_pte+0x295/0x390 [ 1859.483559] Code: 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c7 85 58 ff ff ff 00 00 00 00 48 c1 ea 03 80 3c 02 00 0f 85 d4 00 00 00 48 c1 eb 03 <49> c7 45 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 41 be 01 00 [ 1859.502470] RSP: 0018:ffff8801c6a371d8 EFLAGS: 00010a02 [ 1859.507841] RAX: dffffc0000000000 RBX: 1ffff10038d46e40 RCX: ffffc90005eaa000 [ 1859.515115] RDX: 1ffff100390b4e00 RSI: ffffffff8111178b RDI: 0000000000000007 [ 1859.522387] RBP: ffff8801c6a372a8 R08: ffff8801b858a680 R09: 1ffffffff1273955 [ 1859.529656] R10: ffffed003b5e4732 R11: ffff8801daf23993 R12: 1ffff10038d46e3c [ 1859.536933] R13: ffff8801c85a7000 R14: 0000000000000004 R15: 0000000000000000 [ 1859.544217] FS: 00007fcc895e7700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 1859.552447] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1859.558332] CR2: ffff8801c85a7000 CR3: 00000001ce25a000 CR4: 00000000001426e0 [ 1859.565640] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1859.572911] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1859.580178] Call Trace: [ 1859.582782] ? ept_prefetch_invalid_gpte.isra.71+0x1c0/0x1c0 [ 1859.588588] ? __lock_is_held+0xb5/0x140 [ 1859.592665] kvm_mmu_prepare_zap_page+0x1f9/0x1510 [ 1859.597710] ? trace_hardirqs_off+0xb8/0x310 [ 1859.602135] ? kasan_check_read+0x11/0x20 [ 1859.606293] ? kvm_handle_hva_range+0x780/0x780 [ 1859.610973] ? __lock_acquire+0x7ec/0x4ec0 [ 1859.615218] ? __lock_acquire+0x7ec/0x4ec0 [ 1859.619493] ? graph_lock+0x170/0x170 [ 1859.623302] ? mark_held_locks+0x130/0x130 [ 1859.627550] ? mark_held_locks+0x130/0x130 [ 1859.631790] ? find_held_lock+0x36/0x1c0 [ 1859.635859] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1859.641406] ? check_preemption_disabled+0x48/0x280 [ 1859.646438] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1859.651990] ? kvm_make_vcpus_request_mask+0x45b/0x5c0 [ 1859.657276] ? gfn_to_pfn_atomic+0x7a0/0x7a0 [ 1859.661697] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1859.667247] ? check_preemption_disabled+0x48/0x280 [ 1859.672275] ? check_preemption_disabled+0x48/0x280 [ 1859.677306] ? kvm_reload_remote_mmus+0x99/0xe0 [ 1859.681988] ? kvm_make_all_cpus_request+0xe0/0xe0 [ 1859.686942] kvm_mmu_invalidate_zap_all_pages+0x348/0x7b0 [ 1859.692502] ? kvm_mmu_zap_collapsible_sptes+0x850/0x850 [ 1859.697968] ? kvm_vcpu_on_spin+0x830/0x830 [ 1859.702300] ? lock_acquire+0x1ed/0x520 [ 1859.706284] ? lock_release+0x970/0x970 [ 1859.710263] ? lock_release+0x970/0x970 [ 1859.714243] ? trace_hardirqs_on+0x310/0x310 [ 1859.718664] kvm_arch_flush_shadow_all+0x15/0x20 [ 1859.723428] kvm_mmu_notifier_release+0x59/0x90 [ 1859.728106] ? kvm_vcpu_on_spin+0x830/0x830 [ 1859.732991] mmu_notifier_unregister+0x1ff/0x600 [ 1859.737761] ? kvm_vcpu_on_spin+0x830/0x830 [ 1859.742091] ? __mmu_notifier_register+0x30/0x30 [ 1859.746858] ? __free_pages+0x10a/0x190 [ 1859.750838] ? free_unref_page+0x960/0x960 [ 1859.755077] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1859.760545] kvm_put_kvm+0x6c0/0xff0 [ 1859.764277] ? kvm_write_guest_cached+0x40/0x40 [ 1859.768966] ? up_write+0x7b/0x220 [ 1859.772509] ? up_read+0x110/0x110 [ 1859.776054] ? mntput+0x74/0xa0 [ 1859.779415] ? debugfs_remove_recursive+0x40d/0x530 [ 1859.784450] ? debugfs_remove+0x130/0x130 [ 1859.788608] ? kvm_vm_release+0x50/0x50 [ 1859.792595] kvm_vcpu_release+0x7b/0xa0 [ 1859.796574] __fput+0x385/0xa30 [ 1859.799864] ? get_max_files+0x20/0x20 [ 1859.803761] ? trace_hardirqs_on+0xbd/0x310 [ 1859.808100] ? kasan_check_read+0x11/0x20 [ 1859.812256] ? task_work_run+0x1af/0x2a0 [ 1859.816326] ? __bpf_trace_preemptirq_template+0x30/0x30 [ 1859.821788] ? kasan_check_write+0x14/0x20 [ 1859.826033] ? do_raw_spin_lock+0xc1/0x230 [ 1859.830278] ____fput+0x15/0x20 [ 1859.833563] task_work_run+0x1e8/0x2a0 [ 1859.837456] ? task_work_cancel+0x240/0x240 03:57:10 executing program 4: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x80045301, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) 03:57:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0xc0105303, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1859.841807] ? cpumask_weight.constprop.5+0x3f/0x3f [ 1859.846835] ? do_syscall_64+0x9a/0x820 [ 1859.850821] ? do_syscall_64+0x9a/0x820 [ 1859.854808] exit_to_usermode_loop+0x318/0x380 [ 1859.859401] ? syscall_slow_exit_work+0x520/0x520 [ 1859.864248] ? ksys_ioctl+0x81/0xd0 [ 1859.867888] do_syscall_64+0x6be/0x820 [ 1859.871788] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 1859.877159] ? syscall_return_slowpath+0x5e0/0x5e0 [ 1859.882095] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1859.886961] ? trace_hardirqs_on_caller+0x310/0x310 [ 1859.892001] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 1859.897027] ? prepare_exit_to_usermode+0x291/0x3b0 [ 1859.902059] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1859.906916] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1859.912123] RIP: 0033:0x4573d7 [ 1859.915328] Code: 48 83 c4 08 48 89 d8 5b 5d c3 66 0f 1f 84 00 00 00 00 00 48 89 e8 48 f7 d8 48 39 c3 0f 92 c0 eb 92 66 90 b8 10 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 5d b5 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1859.934234] RSP: 002b:00007fcc895e5098 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1859.941965] RAX: 0000000000000000 RBX: 0000000000000018 RCX: 00000000004573d7 [ 1859.949237] RDX: 00007fcc895e56f0 RSI: 000000008138ae83 RDI: 0000000000000005 [ 1859.956512] RBP: 0000000020019000 R08: 0000000000000001 R09: 0000000000000000 [ 1859.963783] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000fec00000 [ 1859.971059] R13: 0000000000000008 R14: 00000000004d7cf8 R15: 00000000ffffffff [ 1859.978332] Modules linked in: [ 1859.981528] CR2: ffff8801c85a7000 [ 1859.984992] ---[ end trace 1416e6196016e9d1 ]--- [ 1859.989765] RIP: 0010:mmu_page_zap_pte+0x295/0x390 03:57:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40505331, &(0x7f0000000240)={0x0, 0x0, 'client0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f"}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1859.994700] Code: 48 b8 00 00 00 00 00 fc ff df 4c 89 ea 48 c7 85 58 ff ff ff 00 00 00 00 48 c1 ea 03 80 3c 02 00 0f 85 d4 00 00 00 48 c1 eb 03 <49> c7 45 00 00 00 00 00 48 b8 00 00 00 00 00 fc ff df 41 be 01 00 [ 1860.013612] RSP: 0018:ffff8801c6a371d8 EFLAGS: 00010a02 [ 1860.018989] RAX: dffffc0000000000 RBX: 1ffff10038d46e40 RCX: ffffc90005eaa000 [ 1860.026264] RDX: 1ffff100390b4e00 RSI: ffffffff8111178b RDI: 0000000000000007 [ 1860.033543] RBP: ffff8801c6a372a8 R08: ffff8801b858a680 R09: 1ffffffff1273955 03:57:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000001240)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000400)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x0, 'client0\x00', 0x0, "5d15a010d251b78e", "49f6e276057aa59b29074005e1101695a88afe5feb8e9370faf5b1ff58f1ec0f", 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40605346, &(0x7f00000004c0)={{}, 'port0\x00'}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f00000001c0)={{}, {0x0, 0x1c9c380}}, &(0x7f0000000180)) tkill(r1, 0x1000000000013) [ 1860.040815] R10: ffffed003b5e4732 R11: ffff8801daf23993 R12: 1ffff10038d46e3c [ 1860.048088] R13: ffff8801c85a7000 R14: 0000000000000004 R15: 0000000000000000 [ 1860.055364] FS: 00007fcc895e7700(0000) GS:ffff8801daf00000(0000) knlGS:0000000000000000 [ 1860.063589] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1860.069556] CR2: ffff8801c85a7000 CR3: 00000001ce25a000 CR4: 00000000001426e0 [ 1860.076827] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1860.084102] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1860.091372] Kernel panic - not syncing: Fatal exception [ 1860.097632] Kernel Offset: disabled [ 1860.101279] Rebooting in 86400 seconds..