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", 0x0, 0x61d}, {&(0x7f00000021c0)="724ff5d163618f0f110d5368be109e047996ac7916b719abd2da06f5", 0x0, 0x7}]) r0 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x10000, 0xa6fd2455fa706322) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) 03:49:54 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0605345, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:54 executing program 2: syz_read_part_table(0xedf2, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a680257c1a68ab34eeed4ec2742943ce0b81fe3256387a4250bb41b574e2b9b3e854e1d7d53e34fd7d4cbcdfcdd8dbcba9cf72a4dc5660e957ee7d9159cf69f37c041a8878ac200ead63d0a80729dbd0a13a67147098c9c526244d2199fbc21aa52e358674a1f901199e9bdc13b6b89ea403ef8a577baf265115e0eaaa2066ba8871e8fbf4f7dc0e5eadd8f40987c7f97817ea6e9d975fa6492a6ab1ef29f377e68926366f15cb942c", 0xc3, 0x3}]) 03:49:54 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./file0\x00', 0x200001, 0x4000000080) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000280)) syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x8, 0x500) clone(0x200000, &(0x7f0000000340)="91b665cfe968e781db", &(0x7f0000000380), &(0x7f00000003c0), &(0x7f0000000400)="ed8880f28850ce232cb5491752417c26a009b631445bb4aa5cd9109b3d05bdfc854b9b5a04db518f2f6bd61f8e15123a1b7d26bc6f7bbeab13425374cb21f996e94f7d67ba7af44e896e09a33227e1077fe976a75b7a5f7df7eba1d2a5528122b2aa858b373a8edf8c604b1059b63bcf3143cd530de50dc04458e9c677fceccd3c04031cbed194c3d3db6a7297e2e8ae9c76e4806b985ff4f54d38e48af63f453443b1") fstat(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchownat(r0, &(0x7f00000001c0)='./file0\x00', r1, r2, 0x1800) ioctl$SNDRV_TIMER_IOCTL_STATUS(r0, 0x80605414, &(0x7f00000000c0)=""/221) 03:49:54 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) openat$cgroup_type(0xffffffffffffffff, &(0x7f00000000c0)='cgroup.type\x00', 0x2, 0x0) r0 = open(&(0x7f0000000180)='./file0\x00', 0x400000, 0x68) getsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f00000001c0)=0x20, &(0x7f0000000200)=0x4) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000240)) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) setsockopt$RDS_FREE_MR(r0, 0x114, 0x3, &(0x7f00000002c0)={{0x6, 0x1}, 0x65}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100), 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = dup(r1) ioctl$TIOCGETD(r2, 0x5424, &(0x7f0000000080)) ioctl$TUNGETVNETHDRSZ(r0, 0x800454d7, &(0x7f0000000280)) getsockname$unix(r0, &(0x7f0000000300), &(0x7f0000000380)=0x6e) 03:49:54 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x100, 0x0) write$P9_RSYMLINK(r0, &(0x7f00000000c0)={0x14, 0x11, 0x1, {0x19, 0x2, 0x3}}, 0x14) readv(r0, &(0x7f00000015c0)=[{&(0x7f0000000180)=""/210, 0xd2}, {&(0x7f0000000280)=""/26, 0x1a}, {&(0x7f00000002c0)=""/141, 0x8d}, {&(0x7f0000000380)=""/45, 0x2d}, {&(0x7f00000003c0)=""/48, 0x30}, {&(0x7f0000000400)=""/210, 0xd2}, {&(0x7f0000000500)=""/3, 0x3}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f0000001540)=""/109, 0x6d}], 0x9) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) setsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000100)={0x8, 0x7, 0x3, 0x2}, 0x6) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000140)=0xffffffffffffff01) 03:49:55 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:55 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) r1 = gettid() write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0x0, 0x4, {{0x5, 0x9, 0x2, r1}}}, 0x28) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:49:55 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = getpgrp(0xffffffffffffffff) process_vm_readv(r0, &(0x7f0000001240)=[{&(0x7f0000000080)=""/4096, 0x1000}, {&(0x7f0000001080)=""/135, 0x87}, {&(0x7f0000001140)=""/237, 0xed}], 0x3, &(0x7f0000001380)=[{&(0x7f0000001280)=""/236, 0xec}], 0x1, 0x0) 03:49:55 executing program 2: r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fuse\x00', 0x2, 0x0) ioctl$VT_RELDISP(r0, 0x5605) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'erspan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000100)={0x1d, r3}, 0x10) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f0000000080)=r1) 03:49:55 executing program 2: syz_read_part_table(0x80200000, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80, 0x4000) ioctl$KDGKBDIACR(r0, 0x4b4a, &(0x7f0000000040)=""/77) 03:49:55 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x82, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4020940d, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:55 executing program 2: syz_read_part_table(0x5, 0x315, &(0x7f0000000040)) 03:49:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0189436, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:55 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4020940d, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:55 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5335, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:55 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='system.sockprotoname\x00', &(0x7f0000000100)=""/63, 0x3f) r0 = dup(0xffffffffffffffff) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000140)="0d4a96c94d9ca23f60e26b9280878fe0", 0x10) 03:49:55 executing program 2: syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) [ 499.353185] print_req_error: I/O error, dev loop2, sector 264184 03:49:55 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = semget(0x1, 0x7, 0x400) semctl$GETPID(r0, 0x3, 0xb, &(0x7f0000000080)=""/114) 03:49:55 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = openat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x24000, 0xa0) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xfffffffffffffffa, 0x9, 0x7, 0x2}, 'syz0\x00', 0x15}) 03:49:55 executing program 0: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:55 executing program 2: r0 = socket$kcm(0x29, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000000)='yam0\x00') syz_read_part_table(0x80200000, 0x5, &(0x7f0000000080)) 03:49:55 executing program 2: socket$key(0xf, 0x3, 0x2) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0xfffffffffffffffa, 0x40) write$P9_RLOPEN(r0, &(0x7f00000000c0)={0x18, 0xd, 0x1, {{0x4, 0x4}, 0x8100000000000}}, 0x18) 03:49:55 executing program 2: syz_read_part_table(0x8001, 0x4, &(0x7f0000000240)=[{&(0x7f0000000000)="dd1be04248d89f0dec3fb06feee5c72aef9e1fa5c99c5628bb1b4089d8a9a90b89aa9f52ecc6d2355909d49cc5b6f6582abc0716caa95898d243c9f42ed78e34c8879176890266f314607c71dac8e3bf9dc447fe3a7eb9356ca58aecf2fe1d6aa83b10119fe29a8854bb52669c13b3b7826cf4906c11fc8a49a2d6785ba068a644e0cd6add3223f4692c648230de7bb06b0db7d0bcfdae199c49d8c02b25790a6e87dfdc06d72024a797cc90285b7ce2122d7525ea3bb21003", 0xb9, 0x766b}, {&(0x7f00000000c0)="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", 0xfb, 0xb5db}, {&(0x7f00000001c0)="da87e5ca52d024832bb61046a7722440a0d095c5bbb79da96b8c5d4a2f00", 0x1e, 0x7ff}, {&(0x7f0000000200)="0f1e62c660d4918fd14f14ea7110457e8b5c0881a9d6", 0x16}]) syz_read_part_table(0x3, 0x0, &(0x7f0000000040)) 03:49:56 executing program 2: syz_read_part_table(0x80200000, 0xaaaaaaaaaaaac43, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e000000800cd070000bca8b5ca", 0x1d, 0x400000}]) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='procppp0\x00'}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000100)={{0x4, 0x7}, {0x80000001, 0x3}, 0x200000000000, 0x5, 0x9}) 03:49:56 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0xfffffffe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40049409, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:56 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:56 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d, 0x40}]) 03:49:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:56 executing program 1: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d, 0x57455682}]) 03:49:56 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0xe00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:56 executing program 1: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d, 0x57455682}]) 03:49:56 executing program 2: syz_read_part_table(0x3, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) syz_mount_image$jfs(&(0x7f0000000080)='jfs\x00', &(0x7f00000000c0)='./file0\x00', 0x4, 0x4, &(0x7f0000000300)=[{&(0x7f0000000100)="ca59c70251b3f7821b031842017ca165018fe08b02d15b9d42ed30c3c31e11227326a5547f6b70488ec50048cfd012d963360e1a902816e985b012fb2293eccea7ef2137", 0x44, 0x9}, {&(0x7f0000000180)="f2ed08e9333b119e89c2d0af117526c4557a288a0b64cc4ab190a6437e9f7692f5eb253ae6847b295c62786f66542373f4b1464433badae5370822b2fbb404a00891a6acd2f0bfcbdfbe9f791b41348a4fdfb59c904682780055fb79adce27a1142946cd214e1d2e2aeaf18f1ec53e4b551b9d9ebd9adc6f69e522532ca77242b400a1b334598ea0d8524c7af7058db3ae2a9d462714f51f0ecbda271a96979cc3394af2b3c4888a7769a1107098b211ff", 0xb1, 0x4}, {&(0x7f0000000240)="efe9b401b68fd9d79c89f2c0febb10a10021a7efaf97e2262fcaebc938d93f3b0a55114e63e1e4f6878c49e76f2ef3ddbc0b07ec6dff8834366998eb", 0x3c, 0x6}, {&(0x7f0000000280)="3465238b1afe310ec67452e14ba6578c1c63e02121a491eb1664b349a1951c7d53ff7df0eba8e8e365440a2d5ec224bbca6043d734c3252a001c3a4ba5b55e97459d0d5bb49acf8363e9b21bf9bfbfeeec05ccd987ccbea1ed534414006bb0546434d2deddf6dc3c00cb911f52f31e5a90", 0x71, 0x10000}], 0x2240c, &(0x7f0000000480)=ANY=[@ANYBLOB="6572726f72733d72656d6f756e742d726f2c71756f74612c646973636172643d308be5fad2303030303030303030303061332c00a55495f370fb4b560cc10cc34cc19d49d8a91cff31fc00000000000000712e1c38edb78808bcb4a2fbee8f9eb9e6bde544c7898c8e2b7424bb8c2e552305e7a6a3a80000000000000000000000333bae4506cf6a714998de1b989ab5015391ce1ae30f3867f8642220325018f394d4a466781b95edaeb3af200494370463524965"]) socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000001580)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = accept(r0, &(0x7f0000000380)=@in={0x2, 0x0, @remote}, &(0x7f0000000400)=0x80) getsockopt$packet_buf(r1, 0x107, 0x16, &(0x7f0000000580)=""/4096, &(0x7f0000000440)=0x1000) 03:49:56 executing program 1: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d, 0x57455682}]) 03:49:56 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:56 executing program 0: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:56 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000280)) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffff9c, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x6b, "cbbaf58894f872a1d7f5611763f3b85aeb327033169cc7e1eb33ddc273f776b429d553891adb9bf92f4b1f7d8ef888e0ee9ba5e96213cd1ebfbcddd12c0560eafff213b171eb35ef836c28d871b6b7228c760f0fa26f1a05444afea61a8e282f0eea6a2a582e9f2ab5b5db"}, &(0x7f0000000140)=0x73) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000180)=@assoc_value={r1, 0x100000000}, &(0x7f00000001c0)=0x8) ioctl$RNDADDENTROPY(r0, 0x40085203, &(0x7f00000002c0)={0xc000, 0x3b, "83ac5292f69ef59e65c21c072b0f004ce4ce1176c29298e93c4b4913787206ff518c831c48f322d2d158ecb0560d9c3b8fa56b99b3a78b5e5ab9af"}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="010000002e87a3d0a612daa456681e89e5f430"], &(0x7f0000000240)=0x17) 03:49:56 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x20, &(0x7f0000000040)=[@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x12}}, @in={0x2, 0x4e21, @broadcast}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000100)={r1, 0xfff, 0x5, 0x8}, 0x10) syz_read_part_table(0x80200000, 0xaaaad88, &(0x7f00000000c0)) msgget(0x2, 0x40) 03:49:56 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:49:56 executing program 2: syz_read_part_table(0x80200002, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = accept4(0xffffffffffffffff, &(0x7f0000000480)=@ll, &(0x7f00000001c0)=0x80, 0x80800) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000200)={0x0, 0x4, 0x20}, &(0x7f0000000240)=0xc) write$binfmt_aout(r0, &(0x7f00000005c0)={{0x1cf, 0x3, 0x0, 0x1d3, 0x362, 0x401, 0xac, 0xabd7}, "0253f5cf451e90cf3f269539c0c1c928536659d9a503fc95fb6f73f7de05049a485c2fc76b392771bdd382e45067412154419f8dc394ca42122f71c4ce84483e0562acdb6399a1d8630b48c51df1008c63f97adfa54a88512df2c883540bef11665b29ae4f4096708d87f72cbbf4d4", [[]]}, 0x18f) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000280)={r1, @in={{0x2, 0x4e21, @multicast2}}, [0x3, 0x5, 0x6, 0x64cc, 0x2cf, 0x3, 0x1000, 0x7, 0x4, 0x6, 0x800, 0x400, 0x1c, 0x2efa, 0xe243]}, &(0x7f0000000380)=0x100) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000003c0)={0x0, @broadcast, 0x4e23, 0x2, 'none\x00', 0xd, 0x8, 0x4d}, 0x2c) r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$TIOCPKT(r2, 0x5420, &(0x7f0000000440)) sendmmsg$unix(r0, &(0x7f0000000840)=[{&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000800)=[{&(0x7f0000000780)="dc2df45c416ac8338a776bafcfa30f1e293d2f420f3c70893c5aa46349cdd844a5e76fae6ef549b646597daec2084f3c41095bf56d713a1f92e4b37ea1fc40451cbeb7a6ee0c3e70ffabc4859cdc7c840ca290ae8b9bdebeb6acff0cef8f2ca0ce4c045c8f6f1cf2b71b4ca81423", 0x6e}], 0x1, 0x0, 0x0, 0x20044084}], 0x1, 0x40080) setsockopt$inet_tcp_TLS_RX(r2, 0x6, 0x2, &(0x7f0000000400), 0x4) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000000500)={{0x100000001, 0x200}, 'port1\x00', 0x0, 0x10041, 0x4, 0x7, 0xc2b300000, 0x10001, 0x40, 0x0, 0x5, 0x3c8bf691}) 03:49:57 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x82, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:57 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5460, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:57 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:57 executing program 2: syz_read_part_table(0x7, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0xffffffffffffff63, 0x6}]) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) 03:49:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x408c5333, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:57 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x402c5342, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:57 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f00000000c0)={@local, 0x0}, &(0x7f0000000100)=0x14) sendmsg$xdp(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2c, 0x5, r1, 0x29}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="1bcac2324da3a97069cbd1e282f13637eff5de43baf94db467f80f3429561e77c02cfaafc8c604b4e675d21615222ea50a181b242f7927b1af1e692a1b30cfd89911", 0x42}], 0x1, 0x0, 0x0, 0x20000081}, 0x10) sendmsg$nl_netfilter(r0, &(0x7f0000000380)={&(0x7f0000000280), 0xc, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[@ANYBLOB="54000000050700012abd7000fedbdf250c000002400016000400900004002300080000000500000010003b002f6465762f617564696f000008006b00", @ANYRES32=r0, @ANYBLOB="e4009000ff01000000000001000000000000000196ad4ef45e9e55d1fbab7dca0c88c9bcc853b1e9ee94f51d24a33ccc8d38102554ac3f792a5f6451c5001a29736ff8ea0ff78e66adc40466a8b3c3628cf8feb061425ca8d601ba29bf8649ebb05529fe2fc61b1c9f6650216d8d6d271341e082da5d6daac08cbe57d0c5cd4b5721d9"], 0x54}}, 0x800) ioctl$SCSI_IOCTL_SYNC(r0, 0x4) 03:49:57 executing program 0: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:57 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffffff) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0x9e, 0xf, &(0x7f00000001c0)="de41b45b174a38b5a47411f233834c1233ee84187b778af37ea6284d80811ca23b49483d76bae8cffa0ff8d1675b31951dccd100c49944469bbc64ec31af065d842fccbb98a1a4e0f79642bad04e9d772afdebcfb0616ff0d688e002f5f6f29f515f9d922b7d57b815e2c427f93e7efd24c7f955318af504eabc94e430bedaf34c94bc6100168fc5b14cd6c449567ae6fb35e63c3b2cdc7ba57e3dd699dc", &(0x7f0000000280)=""/15, 0x2}, 0x28) recvfrom$inet6(r0, &(0x7f00000000c0)=""/230, 0xe6, 0x40000040, 0x0, 0x0) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)) 03:49:57 executing program 2: syz_read_part_table(0x80200000, 0x2b6, &(0x7f0000000040)) 03:49:59 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0xfeffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:59 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:49:59 executing program 2: setitimer(0x0, &(0x7f0000000080)={{}, {0x77359400}}, &(0x7f00000000c0)) r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x43) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000040)=0xffffffff) syz_mount_image$nfs4(&(0x7f0000000100)='nfs4\x00', &(0x7f0000000140)='./file0\x00', 0xfffffffffffffff7, 0x7, &(0x7f0000000600)=[{&(0x7f0000000180)="f120ec6eb64bb259d36d58e6b8264a6b62a2e15c3de0965ef1cc2c2156d867d1513372f661abe4e556c44f7a589f8d4bd3ad4ec4d1aeb64eb173afb0d8c9ffa71b732f8a072a6dc8145364d76394d5332bc38cf6bdfda7b00c6b3ca0bc00a343ff01bb7195938cbbb48e95da3cbc6b8acb7545084690653f98c1495a385578a4531415c6d5c633fafe25b526d4d90888b3027b958b8e575d796ca0011a3bb3216f48a7f28e6d501093434fbe7d681e9eb3f5712246ac2ebfafbf3db4b2bb2e4413ac7dbf731f54185ad3", 0xca, 0x5}, {&(0x7f0000000280)="e7004cda7a0bb30c510330ebcffdf46b7448d78717829eb4ca563e297e6fb8538fa213efd904330f24eafb8f98966ac328c01202fcdf5eb493c7d8a61651654b733d8eaaff93efcf8e5528e1c81f1cd2bed4767a09b196238b1173bd123c53030039d07b91789f7df7682f71efe1481c224bc6eece9986fe12e2a08761aa019d1266cfdc67c8fff491ab1cec4558fc2c6a418a1b84f7fde19761408b79958774bddbaebe2950edbbca1d5a8c89922fd3", 0xb0, 0x9}, {&(0x7f0000000340)="7ac49dc4ffb6934e3d30cd4cd5ff85b5622a0b7eef7e3c0f4c560d904ea6a5a57476ecd417252a8e87359ec253eabe8de06d64e2b6983ca8d4c4ac9bd9c140896055342fa15e1092f897259a1c6b63510dfb5e10f88b3eb48f7f567104d1a356e680fe17d0cb5ec3c000950c670bec6e1ead7a8f7b028978d1a1ddab1e45d1445c1be54a12d48ec2da5bccf1899d77558dab81b98951dd3fc7f56cb07dd0a250fb", 0xa1, 0xfffffffffffffffd}, {&(0x7f0000000400)="44dd47dd715dddef3035", 0xa, 0x6}, {&(0x7f0000000440)="11d22053895252c3e28cb4ea7f87bd1cf159213407b6c3e43a51c99f2c9c2189801c1a8fc09b6d4d78644337b0bb9f0ec67e6ab1e3e9c90eb9b718f34ae7bbe6b43c59a30ea6b20a4576f91ad565dc22e6c1dabaca29142a75768efe5eafc26dbad57743c89908c6026f12c5b167d2d94cca8ef556b211b0", 0x78, 0x2}, {&(0x7f00000004c0)="42a63356dfa6721c7548a19e2123071e19cdf32c3f01d94aaab06d85190263a60e5dfa6150666276c32233ea0114f2b60b15e1ff5c2f1cc28782195283edce0b68f3237ab81c80b16e6cf8f899a03c6d42c324574d05810399cf97064018a26e581b4010deb6d129b04bd96e3a958d26c742462a8884aea2ffb4b6df84aeb905531c655e601012a7456f5e1a86a4c8", 0x8f, 0x400}, {&(0x7f0000000580)="3cbe72254a5543b07d2ef3560193bb4a8bbce0671b0477105e182a1bad7e8f2ac275592c6353837a738541881c470674da8176c955474de7f5b72fced2438c9e1b3ab766db62f18828e8d5907440c93bf6cafcd83900fcc1283d973d3f43bc2ab4e3efb56bc1ded21463684e85f2384a72f1a2216a42dd", 0x77, 0x6}], 0x7497266265618846, &(0x7f00000006c0)='/dev/input/mice\x00') syz_read_part_table(0x80200000, 0x0, &(0x7f0000000180)) 03:49:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:59 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5310, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x402c5342, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40049409, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:59 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x402c5342, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:49:59 executing program 2: syz_read_part_table(0x80200000, 0x367, &(0x7f0000000100)=[{&(0x7f0000000080)="520000000000001000000000009c9ba2e00081080074b8b5ca71a6802511b126116048c49b6387a5", 0x28}]) syz_read_part_table(0x7, 0x2, &(0x7f0000000000)=[{&(0x7f0000000140)="d665d738c970f516d2113994f338ac742fc4cd87c04464adef240d7c394618cede6a2fa11784813e476fba9a5f84714bcf2ebf22d4ea60a3ff76694846ab467d68e3b45c87d046b40c2f9f7d6fb891cd562167cb444632455bcc6d7c0f95fabdfe7a13f5d2fc137bf45ec757ba63b2e6f93737a97698623f303fc6f9c7d8835724954f81a7eea1e6631f0e79810a0a982a04ad7648949b04", 0x98, 0x8b}, {&(0x7f0000000200)="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", 0x1000, 0x5}]) [ 503.554388] Dev loop2: unable to read RDB block 8 [ 503.559442] loop2: unable to read partition table [ 503.564779] loop2: partition table beyond EOD, truncated [ 503.570409] loop_reread_partitions: partition scan of loop2 () failed (rc=-5) 03:49:59 executing program 2: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x406, 0xffffffffffffff9c) r1 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x8000, 0x101000) ioctl$FUSE_DEV_IOC_CLONE(r0, 0x8004e500, &(0x7f00000000c0)=r1) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:49:59 executing program 2: r0 = syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x101, 0x0) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x100000001, 0x4, 0x401, 0x4, 0x3, 0x1ff}) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) ioctl$KVM_SET_MP_STATE(r0, 0x4004ae99, &(0x7f0000000100)=0xa) ioctl$KVM_RUN(r0, 0xae80, 0x0) 03:49:59 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000080)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) syz_mount_image$minix(&(0x7f0000000000)='minix\x00', &(0x7f00000000c0)='./file0\x00', 0x5, 0x0, &(0x7f0000000100), 0x80, 0x0) 03:50:00 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000240)=0xe8) setuid(r0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ppp\x00', 0x1c1000, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000100)=0x800, 0x4) ioctl$KDSETKEYCODE(r1, 0x4b4d, &(0x7f00000000c0)={0x4, 0x4}) [ 503.804906] VFS: Can't find a Minix filesystem V1 | V2 | V3 on device loop2. 03:50:00 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f00000014c0)=[{&(0x7f00000000c0)="a2a2211c4a1444a8058e178f5a391ccda9a62550e5ccedac366f7421e2f9cd381229ffccbe2978901bc4c80ad4e8073570fa8ea9c191f51ef259371fa7ffa501d3a981785516edcf6aeed8d77816e5388b19", 0x0, 0x200b1f8}, {&(0x7f0000000140)="b698acee0231ecd0cfa97189015bfa07e349e3edf82510562f0ee141a068fe35dda640d54a03d2dccaab095ed564c508dc54c8da63a79bcb321db8c533f18134bf53e1efb266048a997b2b941052e083e2fd078bd4be52756a9d7b78439e2be2f6f7ef5c2cda8662b62e229cd189b532c888e7c075e47f49", 0x0, 0x2}, {&(0x7f00000001c0)="331fbbc77cfa9b9d47896b3144d8c7242d2e579d1d7aaea08149fa62a8a17dfc05ffebb06b3a99d8c14e5956e330ce3460fa9d7e5487d803f98b8b5c3d6604547c2e9b24e47205d6ce5c03aae49e33f1f86ffb53ab8f38a4dbec001e59", 0x0, 0x2}, {&(0x7f0000000240)="ebf979f47a521eb4e58e2298325700498be25fe42b9dd888964caf9b667cdccafbf8d3a090767638ad3d037ac9db3e8be389979babcb3e8e", 0x0, 0x8000}, {&(0x7f0000000280)="bf2edde2e013fd41f07b409426f50f2d741ecf41c4be844b49e8a58e9d27c0363aa588dfaadc6d8cf5173b9087264a77a445ac7f44e5e0176e1084b19e3dd1be50b4f35b702026a873c510b054302511cd06b52b1546ad4701c9d7fbfc75143cd1693012af4f02cc2fab8b3f633fb57ac7171353a9619adf0cffae04d72e59fe656698bcdac7d5c29e3000789d4db73d115da88bc77cbb5d9b0c8f29d70d", 0x0, 0xc3f}, {&(0x7f0000000340)="fbce258d692115f8002e214d84f87bac242ff1a3a5386194aa20739a8fd3fb444ebb9b3dcbdaa94a1b4b68eb1b1ce708ec153c45f4a9a3ecacffaaf96f45de16addc09d4834a86702149b86c7e23aca8225fe673971451b5e35656c5245b595219c34f0a7e4de80b2d69ef6ed8ff0656790f22403927c9b9aeed73e62e942872232060bb74d6b2d950c8d922ad9ee552fdaf8ff12934144da990157c28b56fe272681867fb822acae3610b22695162c6", 0x0, 0x3f}, {&(0x7f0000000400)="a0e37fd61fa583abc7d2b350c45077e36d356230", 0x0, 0x9}, {&(0x7f0000000440)="93452e68e1cca1accfd5f6aa32ed839002dfba2ebcb7dc035a56401861c913f7708ca9e31898c05eb9ea198ce7513e58b1bfcd5ca3bd8bad4f4765a37f58014449319e0f939e76aab9b63d", 0x0, 0x401}, {&(0x7f00000004c0)="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", 0x0, 0x9}]) 03:50:00 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1e5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x2}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x80000001}]}, 0x38}, 0x1, 0x0, 0x0, 0x48040}, 0x4040000) 03:50:00 executing program 2: r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snapshot\x00', 0x400800, 0x0) ioctl$KVM_GET_DEVICE_ATTR(r0, 0x4018aee2, &(0x7f0000000100)={0x0, 0x4, 0x2, &(0x7f00000000c0)=0x6}) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:50:00 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x8200000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:00 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d, 0xffffffffffffffff}]) 03:50:00 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:50:00 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0a85320, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x80045301, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:00 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5310, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0xe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:00 executing program 2: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000080)=0x0) sched_getaffinity(r0, 0x8, &(0x7f00000000c0)) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) ptrace$getenv(0x4201, r0, 0x3, &(0x7f0000000100)) 03:50:00 executing program 2: syz_read_part_table(0x30ca, 0xaaaaaaaaaaaacec, &(0x7f0000000040)=[{&(0x7f0000000080)="5244534ba7b21c000000009e623cde9ba2e00000080074b8b5be60b14b8b28c1bd2500000100000000000000000000", 0x1d, 0x8000001}]) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0xc6000) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000000c0)=0x9) 03:50:00 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = syz_open_dev$dspn(&(0x7f0000001500)='/dev/dsp#\x00', 0x9, 0x2800) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000001540)={0x9, 0x1, 0x1000}, 0x4) 03:50:00 executing program 2: syz_read_part_table(0x801ffffd, 0x1, &(0x7f0000000080)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) recvmsg$kcm(0xffffffffffffff9c, &(0x7f0000001580)={&(0x7f0000000140)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/196, 0xc4}, {&(0x7f00000002c0)=""/100, 0x64}, {&(0x7f0000000340)=""/96, 0x60}, {&(0x7f00000003c0)=""/172, 0xac}, {&(0x7f0000000480)=""/83, 0x53}], 0x5, &(0x7f0000000580)=""/4096, 0x1000, 0x2}, 0x2000) getsockopt$inet_tcp_buf(r0, 0x6, 0x1c, &(0x7f00000015c0)=""/43, &(0x7f0000001600)=0x2b) 03:50:00 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x802, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f00000000c0)={0x0, 0x20, 0x6, 0x10001, 0x5, 0x6, 0x7, 0x6, {0x0, @in6={{0xa, 0x4e21, 0x0, @ipv4={[], [], @broadcast}, 0x8}}, 0x6, 0x4, 0x4, 0xfffffffffffffffe}}, &(0x7f0000000180)=0xb0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000001c0)={r1, 0x3}, 0x8) 03:50:01 executing program 2: syz_read_part_table(0x2, 0x39a, &(0x7f0000000240)=[{&(0x7f0000000140)="7dc70216f8d3040993fbea2a38c9fca553460518d8b2529581f57af1511a945cf772e21b34f4c87663fbef5ac207cf7845194e4586707cce53d67cf1098970520e10dbd63dd496cf678bfa311d1345d805882deff7c781f15bae0697f1fc9eeb71d0babc162b0d11f8c5cd11663a49dbfd9f504745fa92164544ed909c9d765ab9efe361e6701d3da176126fce0279f5fe3a3a93defc2f394d408ff047bae473600a32ffe0f4f4423055f40ebf5024d435b63a74fa27f0896d23376ccd619b20b6d6c13b718ce806635e436ea1772eee297655c4caa3", 0x0, 0x7}]) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2000, 0x0) write$P9_RLCREATE(r0, &(0x7f00000000c0)={0x18, 0xf, 0x2, {{0x40, 0x2, 0x8}, 0x1}}, 0x18) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7fffffff, 0x10000) ioctl$EVIOCGID(r0, 0x80084502, &(0x7f0000000040)=""/23) syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x70001) 03:50:01 executing program 2: syz_mount_image$ntfs(&(0x7f0000000080)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x6800000, 0x9, &(0x7f0000001580)=[{&(0x7f0000000100)="3f29f1f10d07235bcf6af753450b9a79ffd557c30850f19fd700a3d3d0f6f7cdff6e8ef856abdf5a61d2a24a8b85252760e2ad101520e0802dd409435dd93af7f76495b4496ffdf3ba8458283cba9ab3397dd10b77ff268544f1ebfe6f74c5c1e70aa64e5fa724e5ba463f853e1e2c361c10323bb8006d99ff5e947da6d0e9f1d5ec3aa85b59ac824e1214b9c85ec6ed489a3c", 0x93, 0x7}, {&(0x7f00000001c0)="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", 0x1000, 0x1}, {&(0x7f00000011c0)="b7d8513e9cdee5baad2e441fa8f9225cad91e35cbd337335d42d0a0dd070b8b9b5e8be3b5f1846e8297c616b7d0a4ccbe15d15d27e96015042903032f2c0964a288a1d601e894ad6658fec7fb856779ce560a6", 0x53, 0xb98}, {&(0x7f0000001240)="951fe949d32501b44a41ad9924e7", 0xe, 0x81}, {&(0x7f0000001280)="c38e268e79be802dbdbdcc2e2a064ea58cb2d6594ab16d3b31bda06dceced64c6edf9b41874ba38f95e4c06eb9b13cde16d87f1e1a822d2231d58c519f88a704bac36a77363adc5a3439b106122210ad334915d80f08ce3b2d6e698be924832d234f25faacb290a5f3c72496254401eb40b9fbda8a996f189c4965e7ff7e5dde257a", 0x82, 0x60}, {&(0x7f0000001340)="65128cf3415603624a6549c4f24a7c05f044aa026836835608893e31e9ff5b7900a9c8d62ab8834155183a6007519769eb6018bf8d4834485d67252ff4490f611c98c347f14282a028133bc4c1e62269eaf18ea81bb51762a00a8a3ce16ad9e93dcebfa01f0ff6a2d64caa38def67fd010071001559b23a6ee96f23d42839fc604d2cf4b27009a18c7af8acbcbb2c1f6047f24e3694007", 0x97, 0x40}, {&(0x7f0000001400)="1d4b20507ba07008384dffe321a282fa7ab0c4cfb33e575952a81e0774ecdb315ef180825c00c0cf23ff29070c0dd6226cf2ca6d9641d7b512d999e37d2715f03973db84e002575283e458e4c5f7600b3c56683a8ef2110c42cd196f7a26c59fcb6f37f052dc06f362b13e9cdf5ba539c6eeeadb2c33039e1cdd7872667aacccfc4e28958c2bea831749e3db649c5635aa8ea64246b7392b2791c0e77f6899d0acb8c8d2f39da21ddc4d254ec00a02", 0xaf, 0x7bd}, {&(0x7f00000014c0)='+b', 0x2, 0x7fffffff}, {&(0x7f0000001500)="f99bd210ce4faae4da8c3697ceb11c5e52822c770456b8084eae3986f9c64b606ee20bcf6bf75eba4cd06aa762e7a2c9be02eb5a58e0bcbd8b490b1f8f9d8402f38adeac9e", 0x45, 0x200}], 0x20000, &(0x7f0000001680)={[{@case_sensitive_no='case_sensitive=no'}, {@dmask={'dmask', 0x3d, 0x8001}}, {@nls={'nls', 0x3d, 'cp862'}}]}) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:50:01 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = socket$alg(0x26, 0x5, 0x0) fadvise64(r0, 0x0, 0x3, 0x7) 03:50:01 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0xe00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:01 executing program 2: get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x80, &(0x7f0000ffc000/0x1000)=nil, 0x1) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000140)=0xff0) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:50:01 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:01 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5310, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0xfffffffe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:01 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r0 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f0000000100), 0x12) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:50:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0xe00000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:01 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x200800) ioctl$GIO_UNIMAP(r0, 0x4b66, &(0x7f0000000040)={0x9, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) eventfd2(0x80000001, 0x1) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x2000000000000000, 0x8000, 0x5, 0x5}, 'syz0\x00', 0x43}) 03:50:01 executing program 2: r0 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x8, 0x20080) connect$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e) syz_read_part_table(0x200, 0xaaaaaaaaaaaad26, &(0x7f0000000000)=[{&(0x7f0000000080)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d, 0x1}]) 03:50:01 executing program 2: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x8000, 0x0) ioctl$KVM_GET_VCPU_MMAP_SIZE(r0, 0xae04) getsockopt$IP_VS_SO_GET_INFO(r0, 0x0, 0x481, &(0x7f00000000c0), &(0x7f0000000100)=0xc) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) ioctl$void(r0, 0x5450) 03:50:01 executing program 2: socketpair$inet_smc(0x2b, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) flock(r0, 0x2) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r1 = dup(0xffffffffffffff9c) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000000c0)={{0xa, 0x1, 0x1, 0x0, '\x00', 0x7ff}, 0x0, [0x1, 0x5, 0x8, 0x7fff, 0x9, 0xc2c, 0x7, 0x2, 0xae7d, 0x8, 0x6, 0x58b4, 0x1, 0x5, 0x1, 0xff22, 0x2, 0x30e, 0x1, 0x7fff, 0x0, 0x3, 0x1, 0x3, 0x81, 0x3, 0x8, 0x9, 0x8, 0x3, 0x0, 0x8, 0x7, 0x1f, 0x8, 0x4, 0x100000000, 0x7e1, 0x80000001, 0x0, 0xea, 0x2, 0x1, 0x6, 0x6, 0x3480, 0x1, 0x1, 0x674, 0xfffffffffffffffb, 0x40, 0x0, 0x6, 0x0, 0x4d3, 0xa6, 0x8c3, 0xdd, 0x800, 0x3f, 0x0, 0x6, 0x95ce, 0xeb, 0x54d, 0x1f, 0x3, 0x5, 0x739, 0x40, 0x4, 0x0, 0x2, 0x2, 0x1, 0x150, 0x8, 0x4, 0x8, 0x3f, 0x10001, 0x0, 0x2, 0x8, 0x2, 0x5, 0x2, 0xa3, 0xffffffff, 0xffff00000, 0x8000, 0x1f, 0x100000000, 0x3, 0x100000001, 0x800, 0x2, 0x1, 0x8, 0x0, 0x7, 0xffffffff, 0x9, 0x6, 0x40800000, 0x2, 0x3, 0x3ff, 0x3e6, 0x3, 0x80, 0x7, 0x7ff, 0x8, 0x10001, 0x5, 0x5, 0x2, 0xffffffffffff7fff, 0x6, 0xc8b8, 0x7fffffff, 0x80000000, 0xef, 0x7, 0x7ff, 0x6, 0xb03], {r2, r3+30000000}}) 03:50:01 executing program 2: syz_read_part_table(0x80200000, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="5244534ba7011c0000000000009c9b0000000000000003b5ca71a6886e3b6006a51b317e6af7e425c3d17ca2e07dce0a238e055f5a5e0155616cdf610c11da44fe3608fbd2aafaf10e2fd0c0f2ec17de7d1af59d5d4bdbdd5f5d93d4e11db9e87a1bccc8be9c9893621d0680f38801de5bb129e5ba04f8c9958107ce55ed9c257032aadf476a88a4271ccde4c71baf42afee628c8b30fc5a", 0xfffffffffffffde7}]) 03:50:01 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)) r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f00000000c0)={0x32, 0x6, 0x0, {0x2, 0x5, 0x9, 0x0, '%eth1ppp1'}}, 0x32) 03:50:02 executing program 2: syz_read_part_table(0x2, 0x262, &(0x7f0000000040)) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getegid() getgroups(0x3, &(0x7f00000002c0)=[0xee01, 0xffffffffffffffff, 0xffffffffffffffff]) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000000c0)={0x6b3, 0x60fe4b46, 0x3, 0x9, 0x9}, 0x14) setxattr$system_posix_acl(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {0x1, 0x4}, [{0x2, 0x2, r2}, {0x2, 0x5, r3}], {0x4, 0x4}, [{0x8, 0x4, r4}, {0x8, 0x5, r5}], {0x10, 0x3}, {0x20, 0x2}}, 0x44, 0x3) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000380)={0x4, 0x401, 0x1ff, 0x80000000, 0x0, 0xf5}) 03:50:02 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x80540) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup3(r0, r1, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000340)={{0x4, 0x5}, 0x1, 0x200, 0xf66, {0x6c7d1103, 0xfffffffffffff800}, 0x1, 0x2}) r2 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x81, 0x400) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0x58, &(0x7f00000000c0)=[@in={0x2, 0x4e21, @broadcast}, @in6={0xa, 0x4e23, 0x4, @loopback, 0xffff}, @in6={0xa, 0x4e20, 0x800, @dev={0xfe, 0x80, [], 0x2}, 0x20}, @in={0x2, 0x4e22, @multicast1}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f00000001c0)={r3, 0xfffffffffffffff9, 0x2, [0x3, 0x0]}, 0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={r3, 0x68, &(0x7f0000000200)=[@in6={0xa, 0x4e24, 0x8, @loopback, 0xec}, @in={0x2, 0x4e22, @multicast2}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e22, @loopback}, @in6={0xa, 0x4e21, 0x5, @local}]}, &(0x7f00000002c0)=0x10) 03:50:02 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0xffffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:02 executing program 2: syz_read_part_table(0x4, 0xaaaaaaaaaaab0f3, &(0x7f00000002c0)=[{&(0x7f00000000c0)="ddcee4f6e1e05f779425b937acd957f1893fd181a4fd6a2ad3808078000eed31fe1f4807ec975c889c5fd2b70e4c6a61098424228884d09e", 0x0, 0x3}, {&(0x7f0000000140)="e31731c3f11968504296b2303edc8407aabe5ccf069ba9e1843aab20b0a1da099ecad0b00bedf0e04629da95c14784b9f8b3e0ffd0bb23e6a83db926f076f28c2b24a5e7a7340b6660bf4219a8b3a6da475358d298795480fff15d966f9f95183727876cea1d247d95e21c", 0x0, 0x60}, {&(0x7f00000001c0)="97fc2766f033dde0cfb3ed03a682", 0x0, 0x20000000001}, {&(0x7f0000000200)="28b42d1d702eef850406e926326aaa14ebc4d2d2499c20dfbf2755bdae8a8c1426fe4e874670402cc21b341b8a7697b64e90e20168faf0196b6c5ec684896b4883ac2b7ebaeb9c209cad55bb617c934cd7c8d313bf499e4236d907dd6046952a4c42f4b57673ef70a41e706a54d2032d4b4867976b92ca131addb77aa37ab64017658d1899886a0d760c43f375451d14ff3b", 0x0, 0x8001}]) r0 = fcntl$getown(0xffffffffffffffff, 0x9) r1 = getpgid(r0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='oom_adj\x00') r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) ioctl$TIOCPKT(r3, 0x5420, &(0x7f0000000040)=0x4) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) ioctl$KVM_SET_VAPIC_ADDR(r3, 0x4008ae93, &(0x7f00000003c0)=0x800000000000004) 03:50:02 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0xe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:02 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:02 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0xe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:02 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:50:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0xffffffff00000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:02 executing program 2: syz_read_part_table(0x80200000, 0xaaaaaaaaaaaab4b, &(0x7f0000000080)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0xfffffffffffffd93, 0xfffffffffffffffd}]) r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0xda91) 03:50:02 executing program 2: madvise(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) munmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000) 03:50:03 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000040)='/dev/urandom\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r3, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x0) dup2(r3, r3) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x200, 0x0) 03:50:03 executing program 2: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x2000, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='em1ppp1}\x00', r0}, 0x10) ioctl$BLKDISCARD(r0, 0x1277, &(0x7f0000000240)=0x100) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e1c, 0xf81, @mcast1, 0x8}, 0x1c) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r0, 0x800442d3, &(0x7f0000000200)={0x20, 0x7, 0x9000, @empty, 'teql0\x00'}) 03:50:03 executing program 2: r0 = open(&(0x7f0000000080)='.\x00', 0x80, 0x18) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f00000000c0)={0x7, {0xffff, 0x6, 0x4, 0x100000001, 0x800, 0x8}}) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:50:03 executing program 2: pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$VHOST_RESET_OWNER(r0, 0xaf02, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a1, &(0x7f0000000300)='nr0\x00') bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xf8, 0xf1, &(0x7f00000000c0)="6ff00efe5cdc110632483de6d4279a5c02734481e59265e063396a5a938c1bae0d9996cb749fe882148a4d875735110291915c0f5898cd9cc03d8e451e3a12ae120357478858edc40a5df5311664a26721957a0dcd31a281182ec2a69c1155ecd52183be63a601ace51538748abcd874578fc0d0694bf68a303c613a513256095d8a95e54900e8fa90b40e0293b2da9bb3c7993b8e136c0adcba62f784ba186a6176362d4149acad30a3135635136beccea18e6fe1b222d7a251be1fff0f5865b288b2895a0e7c2e4517b6ce36ef2ade785c48936014572089a2da20e28676e071c7908c4997207149a50604e4af0ad612f40847a269cba0", &(0x7f00000001c0)=""/241, 0x81}, 0x28) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:50:03 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x80045300, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:03 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5310, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:03 executing program 2: socketpair(0x3, 0x80000, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, &(0x7f00000000c0)={0x2, 0x3, 0x20, 0x2, 0x4}) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:50:03 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x82000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:03 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:50:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0xfeffffff00000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0xe000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:03 executing program 2: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x40, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000040), 0xffffffffffffffff) r2 = getpid() sched_setscheduler(r2, 0x5, &(0x7f0000000200)) getsockopt$sock_buf(r1, 0x1, 0x1c, &(0x7f0000000100)=""/114, &(0x7f0000000080)=0x2d8) ioctl$BLKTRACESTOP(r0, 0x1275, 0x0) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:50:03 executing program 2: syz_read_part_table(0x80200000, 0x4, &(0x7f00000002c0)=[{&(0x7f0000000080)="fc080bea61c8522ae7d0a8c3d78db51bc31d04a037bf0ac884510edc35a58dc9de3851e30ff5981b4084e6f0a315f3c8ac", 0x31}, {&(0x7f00000000c0)}, {&(0x7f0000000100)="a9426c0f12276888974ded800b9371e964f47b7a1305db65edab2b2566bbfdbe1dc634c27b5da63daf6537746ed4a1cf445b25284dfb522bcb950ab91ae9e990bb3003b7f363b38ff23c07e2def90a92235216cd558fe09fbe5f115951f8dbe3ed2485014cb5f474ab3d2b6209a8ff0e69f2fa40b47d00d0cd28e1e1897e955783920f0dea7ddd66011bcacb85c7b1332289497d4f28c84dd3a6818ead88ff884dd9dd7de4aa67bd2ccceb527ac6b653451e95af79c177138df588b0a61ae47259ef075afedf17d687c916e29fa03ba6377a39efdf12fb25549d2c518e563c6e18542d78972c526e1862", 0xea, 0x8}, {&(0x7f0000000200)="542cbfa91920f72aac9c933f8871b2b3063a5cb252d5430edb0bc01d8bd436f506379e2576c9d0a92cc8fa4d3d36f20292b72117255ac73a0e2fe9880dbdaaa433ffa84c38351a953e2607ddbaca2b0081bd607a80525c89562bf0021ad1e420703e064ba63d4f43b9d54270f265156fdeb50e5210a84a0134953f9a9aa489139038dc375f20e1424dcb9a43bbcbd7b1bab01a3fc4d5668256db6b3b98fbc39c9a", 0xa1, 0xff}]) 03:50:03 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) syz_mount_image$nfs4(&(0x7f0000000080)='nfs4\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x6, &(0x7f0000002340)=[{&(0x7f0000000100)="a871d2f3e0e16293b43dcf21d532f5e391568255108f881071b3b07c87e50145620b2e4639e020c9da409618b0a7e67a7b5fa2257aaf1caf9023e551f6c2c739aa4809d2", 0x44, 0x200}, {&(0x7f0000000180)="bbd192e23d897c8ab5abab828acedbe17e96a32e0e53536ec77c8f6aae4bf21ecfeabd900632fe1222ffeec8f3b87ad58bd1dbf252b61f975758d62f234c8c1c0c1f2e9b8788dc85e2b842d0515b192516abf3ad93d71715d5230e7c2a10", 0x5e, 0x200}, {&(0x7f0000000200)="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", 0x1000, 0x20}, {&(0x7f0000001200)="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", 0x1000, 0xfb3}, {&(0x7f0000002200)="8a1eb62b09b52ec4d668bdc996b08d5d16cf81f02ffbfe4b8d8800466236fe1079b8d5c6a909120e79ba31592eec681abdf1ce", 0x33, 0x21c0}, {&(0x7f0000002240)="4f1e38e6a489940813a6e3a8f5eb6ecc4fa020b985830f607bdb5f3f245b7f22e79a5b5f0ba1114c3e240147406f696043ba8d32ce528bb07dfaebf21255ed421de386c21df38b3322988b5ca05ff63d1590986d18be24efac29a11a7b3ea8ea8bd2f1d923f02a0550fb6cb5fc589876658d284497c7de665110e5153c130c1e0aee6785f430ea347b9c5e79b815eb24039ca780623628cd22595299d62d8efa39aefb472ee6c24c7d3357dd3d6d24c4e7bb1b32ab9c17a7d5671e0dacfc55198913e6c37fbab968c1ab3d126e1d9da42e86cd32c994619438ac3d28c862295b0609346b343d44894e5461336e69fbf446b8c900", 0xf4, 0x2}], 0x0, &(0x7f0000002400)='\x00') 03:50:03 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x1c, 0x80800) setsockopt$inet6_MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000100)={{0xa, 0x4e24, 0x3, @loopback}, {0xa, 0x4e20, 0x6, @local, 0x1f}, 0x0, [0x4, 0x3ff, 0x3, 0x6, 0x7f, 0x9, 0x6, 0x40]}, 0x5c) 03:50:03 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x8000, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x182, 0x0) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f0000000240)={0x2, r1}) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1f1}]) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x329800, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f00000000c0)={0x0, 0x8, 0x30d}, &(0x7f0000000100)=0x8) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f0000000180)={0x73d2}) ioctl$EVIOCREVOKE(r2, 0x40044591, &(0x7f0000000140)=0x9) 03:50:03 executing program 2: syz_read_part_table(0x80200000, 0xaaaaaaaaaaaac24, &(0x7f0000001240)) socket$inet6_dccp(0xa, 0x6, 0x0) r0 = memfd_create(&(0x7f0000000000)='{nodev,md5sumwlan0\x00', 0x1) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x800) 03:50:04 executing program 2: syz_read_part_table(0x80200000, 0x71, &(0x7f0000000040)=[{&(0x7f0000000080)="5244534ba7011c0000000000009c9ba2e00020080074b8b5ca71a680254440024998354670f8c29bee16379dd1ecabb0c8c70eade88c788965b57d61b9ad4b3b72633870de95b7e56f611ab8d125b7c559717c7ec39c6d238890981525939b6b2e280b6ab58beeadd20ab1f7c2a29dbaef483581f1f14f08f72f7cb0c44df975a2473e0a8c554c20cb92d09f0bcc739d753c3731bfda87ac70d2a01a4ab0b90029b3b87a6ff42c83b1fb0989283059cbd990570a0181c23d8984", 0x19}]) 03:50:04 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:04 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0a85320, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x402000, 0x0) ioctl$KVM_XEN_HVM_CONFIG(r0, 0x4038ae7a, &(0x7f0000000140)={0x1, 0xfeb, &(0x7f0000000040)="e842dd0c511d672e892e298dde80136cccfc61b5d41fcf79d8629ebc6340d4fc7f43175acc859508a62ec5db54cff3e9efb6bf2555f78abd3d99db6acdfc82d147b3937a414029feea4206d1beb5af7a5c471f6330470630723da7c95e35393391aeddbfb99545dcdb8a5dbf6000caf1eb6af8ef3b3b804f64d575e8774c55257f51566fd5e730668b1a6249ef4cfaaf798f1d94f47fd539bb967e75f706aeab26764a4624d1c5945759695ae057e17347", &(0x7f0000000100)="059afe54087b8022b33441a98a54cd9a97b864b403a4db4cfc6bc81bb724164878aebe47e2311d77037813047bd5a2bd3b74f807d8d187257759dc55b9", 0xb1, 0x3d}) 03:50:04 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:50:04 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0xfeffffff, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:04 executing program 2: syz_read_part_table(0x80000004, 0x1, &(0x7f0000000040)=[{&(0x7f00000001c0)="52445300000000009c9ba2e00000080074b8b5ca71a68025c62ff68402be9d0513522a6d3678c19f1013a79977e7a37133f51664a8c857a2e43cbd39954d4a8165b44ade7e91146d7e3af780469faa5adcf447f120bb194c6cb4743fd2dfa218a02298f040cab09a3f6a460fa69e672b591a4c377d85eafe23992574a0bd9bcc59949a65819aefa41c572929270878818c1ee75b2958e5a2a26762b245fc33f258bf5cf661e8ad7f94af5b4c3dc8ca75990311bac9a5026defa3b077e5fef32d6bb972145f7df9a0b097eb290ae09fb83501ecb102e2cd3a69c8becc3eb0", 0xfffffffffffffebf}]) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x2, 0xb, 0x93ac, 0xe5ad96399921b5c9, 0x9, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_x_nat_t_type={0x1, 0x14, 0x2}, @sadb_lifetime={0x4, 0xee23d0dc07cc0004, 0x57, 0x8, 0x7, 0x5}, @sadb_sa={0x2, 0x1, 0x4d6, 0x9, 0x0, 0x93, 0x2}]}, 0x48}}, 0x24040081) mkdir(&(0x7f0000000080)='./file0\x00', 0x21) 03:50:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0xe00000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x40000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:04 executing program 2: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x10000, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000080)={0x1ff, 0x3, 'client0\x00', 0xffffffff80000007, "60583b90ed103047", "6148201f780cecbc9e61602aebd4752a65878358d967aaedb9601af5443d8a03", 0x80, 0x75e48887}) r1 = openat(r0, &(0x7f0000000000)='./file1\x00', 0x800, 0x100) faccessat(r1, &(0x7f0000000180)='./file1\x00', 0x46, 0x40000000001d02) 03:50:04 executing program 2: syz_read_part_table(0x4, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.stat\x00', 0x0, 0x0) ioctl$TIOCLINUX6(r0, 0x541c, &(0x7f0000000140)={0x6, 0x3f}) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r2, r3) ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000100)=r1) 03:50:04 executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000100)=0x0) ptrace$setopts(0x4200, r1, 0xfffffffffffffff7, 0x44) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000080)=0x0) sched_setscheduler(r2, 0x6, &(0x7f00000000c0)=0x6c10) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) 03:50:04 executing program 2: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000080)='/dev/null\x00', 0x181100, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000140)=ANY=[@ANYBLOB="01000100898d8fb734d29bbbd891776ac21ad8ababfacc0f785edbe9517d1f553fae9eb37f0664082ae763397ba2f602d093995308a0ae4ed7b401bc89fe9d440a83903e366c4bc5c5f11140ce39214a0eaf64c17ffc06"]) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) ioctl$KDENABIO(r0, 0x4b36) 03:50:04 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x8000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0xc) 03:50:04 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x13}]) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x4000000000000000, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000000c0), &(0x7f0000000100)=0x4) 03:50:05 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000100), 0x12) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:50:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000180)='/dev/sg#\x00', 0x1, 0x2000) ioctl$BLKTRACESETUP(r0, 0x227f, &(0x7f0000000000)) syz_read_part_table(0x80200000, 0x1, &(0x7f0000000140)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d}]) r1 = memfd_create(&(0x7f0000000080)='/dev/sg#\x00', 0x3) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f00000000c0)={0xfe00000000000000, 0x1, 0x9, 0x7, 0x0, 0x7}) ioctl$BLKGETSIZE(r1, 0x1260, &(0x7f00000001c0)) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000100)) 03:50:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 2: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000080074b8b5ca71a68025", 0x1d, 0x8000000000000000}]) 03:50:05 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0xe000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x1f000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x1f00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 7: syz_read_part_table(0x80200000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000000)="5244534ba7011c0000000000009c9ba2e00000120074b8b5ca71a68025", 0x1d}]) 03:50:05 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:05 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5336, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:06 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0xfffffffe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc02c5341, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:06 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x4000000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x1f00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:06 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:06 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x1f00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:07 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0xe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:07 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0xfeffffff, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x1f00000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:07 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) 03:50:07 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x1f00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:07 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0xe00, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:08 executing program 2 (fault-call:8 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x1f000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:08 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r3, 0x1000000000013) 03:50:08 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0xffffffff00000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:08 executing program 7 (fault-call:8 fault-nth:0): mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:08 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x8200, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:08 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0xe00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:09 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0xfeffffff, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:09 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74ffff0700", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0045878, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:09 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:10 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0xe000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:11 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:11 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r3, 0x1000000000013) 03:50:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0xfffffffe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5460, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:11 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:11 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x408c5333, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:11 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0xe00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0605345, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:12 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:12 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0xfeffffff, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:12 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40bc5311, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x1f00000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:13 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:13 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:14 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) tkill(r3, 0x1000000000013) 03:50:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:14 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0xfeffffff00000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x1f00, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:14 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0045878, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:14 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x2, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0xe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:15 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74318200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85323, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:15 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505331, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x4000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0xfeffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:16 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:17 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x80045300, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x4000000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:17 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x402c5342, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:17 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:17 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0xe00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:17 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:18 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x4000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0xe000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:18 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x80045300, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xfeffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:19 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:20 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x1f000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc02c5341, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x1f00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:20 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:20 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0045878, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:21 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5460, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:21 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0xe00, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0105303, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x1f00, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:22 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:22 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85323, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:23 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505331, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xe00, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0xfffffffe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:23 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc02c5341, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:23 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 03:50:24 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 03:50:24 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:24 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5334, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x1f00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xffffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5335, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:25 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 03:50:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:26 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:26 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x2, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x1f000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:26 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 03:50:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc05c5340, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0xffffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:26 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x0) 03:50:27 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x0) 03:50:27 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:27 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74ffff0700", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:27 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xfeffffff, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5334, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:27 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5451, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:28 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x0) 03:50:28 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5450, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:28 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:28 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc020660b, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xe00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:28 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:29 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0xffffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:29 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:29 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4020940d, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:29 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x40000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:29 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0a85320, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:30 executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000380)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x108) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) fcntl$getown(0xffffffffffffffff, 0x9) getpid() setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x1b, &(0x7f00000002c0)={0x7ff, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)='\n\\') r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)='\n\\') r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 533.958731] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)='\n\\') r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 534.051060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)='\n\\') r2 = socket$inet(0x10, 0x3, 0x0) sendmsg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 534.113794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x0, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)='\n\\') sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) [ 534.184169] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x80045301, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:30 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xe000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet6(0xa, 0x0, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:50:30 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:30 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5450, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 534.586070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:30 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r1, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r2 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r2, 0x1000000000013) 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 534.627960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:30 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 534.670849] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 534.709891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:30 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:30 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) [ 534.750529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. [ 534.788760] netlink: 8 bytes leftover after parsing attributes in process `syz-executor0'. 03:50:31 executing program 0: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5332, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:31 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:31 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:31 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0105303, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:31 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:31 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:31 executing program 0: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = socket$inet(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:31 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x0, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:32 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:32 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:32 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5452, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xfffffffe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) socket$inet(0x10, 0x3, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15a3", 0x4c}], 0x1}, 0x0) 03:50:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100), 0x0) 03:50:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100), 0x0) 03:50:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100), 0x0) 03:50:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0) 03:50:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0) 03:50:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)}], 0x1}, 0x0) 03:50:32 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e2800", 0x26}], 0x1}, 0x0) 03:50:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e2800", 0x26}], 0x1}, 0x0) 03:50:33 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e2800", 0x26}], 0x1}, 0x0) 03:50:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:33 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:33 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40505330, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74ffff0700", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1", 0x39}], 0x1}, 0x0) 03:50:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1", 0x39}], 0x1}, 0x0) 03:50:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1", 0x39}], 0x1}, 0x0) 03:50:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268", 0x43}], 0x1}, 0x0) 03:50:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268", 0x43}], 0x1}, 0x0) 03:50:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268", 0x43}], 0x1}, 0x0) 03:50:33 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055", 0x48}], 0x1}, 0x0) 03:50:34 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40bc5311, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:34 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055", 0x48}], 0x1}, 0x0) 03:50:34 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055", 0x48}], 0x1}, 0x0) 03:50:34 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:34 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:34 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0a85322, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f", 0x4a}], 0x1}, 0x0) 03:50:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f", 0x4a}], 0x1}, 0x0) 03:50:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f", 0x4a}], 0x1}, 0x0) 03:50:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15", 0x4b}], 0x1}, 0x0) 03:50:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15", 0x4b}], 0x1}, 0x0) 03:50:34 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x10, 0x3, 0x0) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="240000002a0007031dfffd946fa2830020200a000900000006000000000000000d00ff7e280000001100ffffba16a0aa1c0009b3ebea8653b1cc7e63975c0ac47a6268e3406cf055d90f15", 0x4b}], 0x1}, 0x0) 03:50:34 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'irlan0\x00', 0x1}) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)) ioctl(r0, 0xfffffffe400454da, &(0x7f0000000100)="a35a1c24d32c989be4aba117253b1d26196597b626cd44c0922498f1057e8d5a82528e4e827f7ad421228daae17e1d70cee6a3ba7f816957f2d4203bc46f84a21841ebc1589df7f50cd413e0228a528bce05fc8fed027afb1c9d23d5483e545409d633bf3fa38ee4d48d3b711c8251961557eaf30353dfe34953ef734d37d3815f488197ec5816898683288eace7d794b1935113b77b8229acb6e3b81e8888") 03:50:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0a85320, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:35 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:35 executing program 0: r0 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x8, 0x0, &(0x7f0000000500)=[@release], 0x0, 0x0, &(0x7f0000000280)}) [ 538.954483] binder: 25706:25707 Release 1 refcount change on invalid ref 0 ret -22 [ 538.974576] binder: 25706:25711 Release 1 refcount change on invalid ref 0 ret -22 03:50:35 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:35 executing program 0: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000440)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, &(0x7f0000000000)) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000240)={0x2, 0x0, [{0x0, 0xe4, &(0x7f0000000040)=""/228}, {0x6000, 0x66, &(0x7f00000001c0)=""/102}]}) 03:50:35 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:35 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:35 executing program 0: syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000000040)="1020f5f20100070009000000030000000c0000000900000001000000020000000000000000300000000000000e00000016000000020000000200000002000000020000000e000000000400000004000000080000000c00000010000000140000030000000100000002", 0x69, 0x1400}], 0x0, &(0x7f0000000240)=ANY=[]) 03:50:35 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5332, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:35 executing program 0: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000140)='net/packet\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x0) 03:50:35 executing program 0: clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000000)) mprotect(&(0x7f0000ff9000/0x1000)=nil, 0x1000, 0x7000000) 03:50:35 executing program 0: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.net\x00', 0x200002, 0x0) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000fd7ff0)={0x77359400}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f000000d000)={0x0, 0x7f}, &(0x7f0000000080)=0xfffffffffffffffd, 0x0) fchdir(r0) request_key(&(0x7f0000000180)='.request_key_auth\x00', &(0x7f00000001c0), &(0x7f0000000200)='threaded\x00', 0xfffffffffffffffc) r1 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000240)={{{@in, @in6=@mcast1}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in6=@mcast1}}, &(0x7f0000000380)=0xe8) syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$EVIOCGABS3F(r1, 0x8018457f, &(0x7f0000000480)=""/82) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) rt_sigaction(0x0, 0x0, 0x0, 0x8, &(0x7f0000000100)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000300)}) ioctl$VT_RELDISP(0xffffffffffffffff, 0x5605) write$cgroup_type(r1, &(0x7f00000009c0)='threaded\x00', 0xd4b9afd) fallocate(r1, 0x3, 0x0, 0x8000) fallocate(r1, 0x0, 0x0, 0xfff9) 03:50:35 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5336, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:36 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:36 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:36 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:36 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000000)="00000400", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9830000e400000001", 0x15}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000140)={0xf0}) 03:50:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000000)="00000400", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9830000e400000001", 0x15}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000140)={0xf0}) 03:50:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000000)="00000400", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9830000e400000001", 0x15}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000140)={0xf0}) 03:50:36 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) syz_mount_image$ext4(&(0x7f0000000000)="00000400", &(0x7f0000000080)='./file0\x00', 0x0, 0x1, &(0x7f00000003c0)=[{&(0x7f0000000140)="0001000000ff000000000000c9830000e400000001", 0x15}], 0x0, &(0x7f0000000180)=ANY=[]) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000140)={0xf0}) 03:50:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:36 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:36 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5451, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:36 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:37 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:37 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:37 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:37 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:37 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:37 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(0xffffffffffffffff, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(r0, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:37 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(r0, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:37 executing program 0: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(r0, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:37 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:37 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0a85322, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:37 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:37 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(r0, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:37 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:38 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:38 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(r0, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:38 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5421, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:38 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(r0, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:38 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x400452c9, &(0x7f0000000000)=ANY=[@ANYBLOB="ee00cd0f8eab7f904a6d20b4b3f88eed0fc7eaf0f01cc5641f1215437ae5c247d2e2dc22673419d5b8a1a73a67fadc44ed54436f0e4ef7eaf0ec16b99f12978273ee3c8af27fb3ecc3f59c5ad55f537cb8c9b9740d3916e8d43b83ce58429bbdb52c0753cdeaa97248e087fbe701a97c50bdcf4c77b7f6bb93f344c3ddee42383287f2d5b9ca607961edd632"]) 03:50:38 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:50:38 executing program 0: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x510, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x498, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000140), 0xc, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="0000000000001476"], 0x1}}, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) perf_event_open(&(0x7f00000001c0)={0x5, 0x70, 0x7, 0x0, 0x2, 0xff, 0x0, 0x4, 0x14000, 0x1, 0x9, 0x9, 0x7, 0xab3, 0x5, 0x6, 0x2, 0x4, 0x100000000, 0x9, 0x7fffffff, 0x7, 0x5, 0x5fd, 0x3ff, 0x8000, 0x7, 0x0, 0x2, 0xfffffffffffffffe, 0x3460, 0x80, 0x1000, 0x3b37, 0x8, 0x1, 0x1cb, 0x2, 0x0, 0xfffffffffffffffc, 0x2, @perf_config_ext={0x8, 0xe1d}, 0x40, 0x7, 0x200, 0x2, 0x0, 0x0, 0x4731}, 0x0, 0x3, r0, 0x2) 03:50:38 executing program 0: r0 = perf_event_open(&(0x7f000001d000)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$uinput(0xffffffffffffff9c, &(0x7f0000000540)='/dev/uinput\x00', 0x0, 0x0) syz_mount_image$vfat(&(0x7f0000001680)='vfat\x00', &(0x7f0000000100)='./file0\x00', 0x100000000000dfff, 0x1, &(0x7f0000000040)=[{&(0x7f00000016c0)="eb64c86d4f66732e66617400020441000500077008f8", 0x16}], 0x0, &(0x7f0000000140)=ANY=[]) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x200000005, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x7}, 0x1c) ioctl$EVIOCGVERSION(0xffffffffffffffff, 0x80044501, &(0x7f0000000140)=""/186) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x5eb, 0x0, 0x100}, &(0x7f0000000580)=0x14) ioctl$TIOCMBIS(0xffffffffffffffff, 0x5416, &(0x7f0000000740)=0x3) r2 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x120e, 0x80) sendmsg$nl_netfilter(r2, &(0x7f0000000700)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x421000}, 0xc, &(0x7f0000000500)={&(0x7f0000000680)={0x38, 0x10, 0x5, 0x300, 0x70bd26, 0x25dfdbff, {0x2}, [@generic="74fc1ac27fcdbf56bca7866883d483348d3ea63323b7c2f44bf1ef6a55a5d8866d84416e"]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x810) sendmmsg(r1, &(0x7f00000002c0), 0x400000000000174, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, &(0x7f00000002c0)={{0xa, 0x4e20}, {0xa, 0x4e20, 0x0, @mcast1, 0x31}, 0x8, [0x400, 0x5, 0x100000001, 0x5, 0x9021, 0x0, 0x3, 0x4]}, 0x5c) mknod(&(0x7f0000000280)='./file0/file0\x00', 0x0, 0x0) readlink(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000005c0)=""/133, 0x85) mmap(&(0x7f0000ff4000/0xa000)=nil, 0xa000, 0x2000000, 0x100011, r0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000780)={0xab92, 0x0, 0x0, 0x0, 0x2, 0x3ff}) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x9) perf_event_open(&(0x7f0000000400)={0x7, 0x70, 0x0, 0x1, 0x100, 0x7, 0x0, 0x7e58, 0xb00, 0x8, 0x3, 0x400, 0x5, 0x3ff, 0x101, 0x0, 0x3f, 0x5, 0x2, 0x6, 0x7, 0x9, 0x7, 0x1, 0xc, 0x1, 0x9, 0x50c58dcb, 0x3, 0x3, 0x0, 0x2, 0x1, 0x3f, 0x5, 0x3f, 0xca88, 0x10000, 0x0, 0x3, 0x5, @perf_bp={&(0x7f00000000c0), 0x7}, 0x1000c, 0x4, 0x3, 0x7, 0x101, 0x6, 0x7}, 0x0, 0xf, 0xffffffffffffffff, 0x8) openat$dsp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/dsp\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0x0, 0xffffffffffffffff, 0x0) umount2(&(0x7f0000000380)='./file0\x00', 0x3) syz_open_dev$sndseq(&(0x7f0000000240)='/dev/snd/seq\x00', 0x0, 0x0) 03:50:38 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0045878, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:38 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:38 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:38 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:39 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x80045301, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:39 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:39 executing program 0: clone(0x0, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) mprotect(&(0x7f0000ff8000/0x3000)=nil, 0x3000, 0x0) 03:50:39 executing program 0: perf_event_open(&(0x7f0000c86f88)={0x2, 0x126, 0x800000000000012, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) fcntl$getflags(0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000040), 0x4) 03:50:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000680), 0x1000) read$FUSE(r0, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) 03:50:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000680), 0x1000) read$FUSE(r0, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) 03:50:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) clone(0x210007fa, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) sched_setscheduler(0x0, 0x5, &(0x7f0000000200)) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000005c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r0, &(0x7f0000000680), 0x1000) read$FUSE(r0, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1}, 0x50) lstat(&(0x7f0000000000)='./file0/file0\x00', &(0x7f0000000340)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) 03:50:39 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:39 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:39 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:39 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:39 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:39 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:39 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:40 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:40 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5421, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:40 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:40 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:40 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:40 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:40 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5335, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5336, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:41 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5310, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:41 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:41 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:41 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:41 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:41 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc05c5340, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:41 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5336, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:42 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc020660b, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:42 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:42 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:42 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:42 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:42 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0189436, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:42 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5336, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:43 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:43 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:43 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:43 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:43 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4020940d, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:43 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:43 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x402c5342, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:44 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:44 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:44 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0605345, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:44 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:44 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x408c5333, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:44 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:45 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:46 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:46 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:46 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:46 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5310, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:46 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:46 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0189436, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:46 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:47 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40049409, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:47 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc058534b, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:47 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:47 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:47 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:47 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5310, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:49 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000), &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:49 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc08c5336, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:49 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40049409, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:49 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:49 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:49 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:49 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:50 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:50 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:50 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0xe00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:50 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x5452, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:50 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:50 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:50 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:51 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:52 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 03:50:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:52 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:52 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:52 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x1f00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:52 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x4000000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:52 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:52 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:53 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0xe00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:53 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x0) 03:50:53 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0xfeffffff, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:53 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:53 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:53 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:53 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0xfffffffe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(0x0, 0x1000000000013) 03:50:54 executing program 1: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:54 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0xfffffffe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:54 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:54 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:54 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0xe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:54 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:54 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:54 executing program 1 (fault-call:4 fault-nth:0): mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:55 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x87, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:55 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:55 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0xffffffff00000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:55 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:55 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:55 executing program 0 (fault-call:2 fault-nth:0): r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:50:55 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 559.639875] FAULT_INJECTION: forcing a failure. [ 559.639875] name failslab, interval 1, probability 0, space 0, times 0 [ 559.651596] CPU: 1 PID: 26675 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 559.660092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 559.669434] Call Trace: [ 559.672027] dump_stack+0x1c9/0x2b4 [ 559.675674] ? dump_stack_print_info.cold.2+0x52/0x52 [ 559.680885] should_fail.cold.4+0xa/0x11 [ 559.684968] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 559.690086] ? __lock_acquire+0x7fc/0x5020 [ 559.694341] ? print_usage_bug+0xc0/0xc0 [ 559.698409] ? rcu_is_watching+0x8c/0x150 [ 559.702570] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 559.707260] ? graph_lock+0x170/0x170 [ 559.711065] ? find_held_lock+0x36/0x1c0 [ 559.715135] ? __lock_is_held+0xb5/0x140 [ 559.719213] ? check_same_owner+0x340/0x340 [ 559.724006] ? rcu_note_context_switch+0x680/0x680 [ 559.728944] __should_failslab+0x124/0x180 [ 559.733192] should_failslab+0x9/0x14 [ 559.737005] kmem_cache_alloc+0x29c/0x710 [ 559.741183] __anon_vma_prepare+0xc4/0x720 [ 559.745449] ? __lock_acquire+0x7fc/0x5020 [ 559.749698] ? anon_vma_fork+0x960/0x960 [ 559.753785] do_huge_pmd_anonymous_page+0x12e6/0x1bd0 [ 559.758965] ? mark_held_locks+0x160/0x160 [ 559.763216] ? __thp_get_unmapped_area+0x180/0x180 [ 559.768144] ? print_usage_bug+0xc0/0xc0 [ 559.772219] ? check_noncircular+0x20/0x20 [ 559.776482] ? print_usage_bug+0xc0/0xc0 [ 559.780554] ? __wake_up_common_lock+0x1d0/0x330 [ 559.785311] ? check_noncircular+0x20/0x20 [ 559.789555] ? pud_val+0x88/0x100 [ 559.793013] ? pmd_val+0x100/0x100 [ 559.796564] ? print_usage_bug+0xc0/0xc0 [ 559.800643] __handle_mm_fault+0x2caf/0x4350 [ 559.805061] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 559.809901] ? graph_lock+0x170/0x170 [ 559.813715] ? graph_lock+0x170/0x170 [ 559.817565] ? lock_downgrade+0x8f0/0x8f0 [ 559.821728] ? handle_mm_fault+0x8c4/0xc80 [ 559.825961] ? handle_mm_fault+0x8c4/0xc80 [ 559.830201] ? kasan_check_read+0x11/0x20 [ 559.834371] ? rcu_is_watching+0x8c/0x150 [ 559.838529] ? __do_page_fault+0x620/0xe50 [ 559.842769] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 559.847449] handle_mm_fault+0x53e/0xc80 [ 559.851525] ? __handle_mm_fault+0x4350/0x4350 [ 559.856103] ? find_vma+0x34/0x190 [ 559.859635] __do_page_fault+0x620/0xe50 [ 559.863711] ? mm_fault_error+0x380/0x380 [ 559.867872] ? graph_lock+0x170/0x170 [ 559.871723] do_page_fault+0xf6/0x7a4 [ 559.875532] ? vmalloc_sync_all+0x30/0x30 [ 559.879686] ? error_entry+0x76/0xd0 [ 559.883415] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 559.888442] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 559.893289] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 559.898319] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 559.903194] page_fault+0x1e/0x30 [ 559.906657] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 559.912289] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 559.931203] RSP: 0018:ffff880192017798 EFLAGS: 00010206 [ 559.936572] RAX: ffffed0032402f1e RBX: 0000000000000018 RCX: 0000000000000003 [ 559.943855] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffff8801920178d8 [ 559.951129] RBP: ffff8801920177d0 R08: ffffed0032402f1e R09: ffffed0032402f1b [ 559.958410] R10: ffffed0032402f1d R11: ffff8801920178ef R12: 0000000020000018 [ 559.965685] R13: 0000000020000000 R14: ffff8801920178d8 R15: 00007ffffffff000 [ 559.972982] ? _copy_from_user+0x10d/0x150 [ 559.977223] rfcomm_dev_ioctl+0xdaa/0x2240 [ 559.981459] ? mark_held_locks+0xc9/0x160 [ 559.985609] ? rfcomm_dev_state_change+0x150/0x150 [ 559.990538] ? lockdep_hardirqs_on+0x421/0x5c0 [ 559.995107] ? trace_hardirqs_on+0xbd/0x2c0 [ 559.999421] ? lock_release+0x9f0/0x9f0 [ 560.003393] ? lock_sock_nested+0xe7/0x120 [ 560.007654] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 560.012763] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 560.017367] ? kasan_check_write+0x14/0x20 [ 560.021614] ? lock_sock_nested+0x9f/0x120 [ 560.025869] ? __local_bh_enable_ip+0x161/0x230 [ 560.030556] rfcomm_sock_ioctl+0x89/0xb0 [ 560.034634] sock_do_ioctl+0xe4/0x3e0 [ 560.038438] ? compat_ifr_data_ioctl+0x170/0x170 [ 560.043188] ? kasan_check_read+0x11/0x20 [ 560.047347] ? rcu_is_watching+0x8c/0x150 [ 560.051512] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 560.056202] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 560.061403] sock_ioctl+0x30d/0x680 [ 560.065058] ? dlci_ioctl_set+0x40/0x40 [ 560.069036] ? ksys_dup3+0x690/0x690 [ 560.072763] ? find_held_lock+0x36/0x1c0 [ 560.076865] ? kasan_check_write+0x14/0x20 [ 560.081106] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 560.086051] ? dlci_ioctl_set+0x40/0x40 03:50:56 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0xe, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:56 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:56 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:56 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0xfeffffff00000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 560.090037] do_vfs_ioctl+0x1de/0x1720 [ 560.093945] ? __lock_is_held+0xb5/0x140 [ 560.098018] ? ioctl_preallocate+0x300/0x300 [ 560.102436] ? __fget_light+0x2f7/0x440 [ 560.106425] ? fget_raw+0x20/0x20 [ 560.109895] ? __sb_end_write+0xac/0xe0 [ 560.113888] ? fput+0x130/0x1a0 [ 560.117178] ? do_syscall_64+0x9a/0x820 [ 560.121160] ? do_syscall_64+0x9a/0x820 [ 560.125142] ? lockdep_hardirqs_on+0x421/0x5c0 [ 560.129728] ? security_file_ioctl+0x94/0xc0 [ 560.134154] ksys_ioctl+0xa9/0xd0 [ 560.137623] __x64_sys_ioctl+0x73/0xb0 [ 560.141515] do_syscall_64+0x1b9/0x820 [ 560.145391] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 560.150743] ? syscall_return_slowpath+0x5e0/0x5e0 [ 560.155678] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 560.160704] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 560.165716] ? recalc_sigpending_tsk+0x180/0x180 [ 560.170470] ? kasan_check_write+0x14/0x20 [ 560.174707] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 560.179564] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 560.184745] RIP: 0033:0x457099 03:50:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 560.187949] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 560.206877] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 560.214628] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 560.221894] RDX: 0000000020000000 RSI: 00000000400452c9 RDI: 0000000000000003 [ 560.229214] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 560.236467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 560.243727] R13: 00000000004cf520 R14: 00000000004c57d2 R15: 0000000000000000 03:50:56 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:56 executing program 0 (fault-call:2 fault-nth:1): r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) [ 560.410561] FAULT_INJECTION: forcing a failure. [ 560.410561] name failslab, interval 1, probability 0, space 0, times 0 [ 560.422005] CPU: 0 PID: 26700 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 560.430514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 560.439887] Call Trace: [ 560.442484] dump_stack+0x1c9/0x2b4 [ 560.446118] ? dump_stack_print_info.cold.2+0x52/0x52 [ 560.451314] ? __kernel_text_address+0xd/0x40 [ 560.455823] ? unwind_get_return_address+0x61/0xa0 [ 560.460788] should_fail.cold.4+0xa/0x11 [ 560.464870] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 560.469992] ? save_stack+0xa9/0xd0 [ 560.473616] ? kasan_kmalloc+0xc4/0xe0 [ 560.477517] ? kasan_slab_alloc+0x12/0x20 [ 560.481676] ? kmem_cache_alloc+0x12e/0x710 [ 560.486000] ? __anon_vma_prepare+0xc4/0x720 [ 560.490422] ? do_huge_pmd_anonymous_page+0x12e6/0x1bd0 [ 560.495806] ? __handle_mm_fault+0x2caf/0x4350 [ 560.500392] ? handle_mm_fault+0x53e/0xc80 [ 560.504628] ? graph_lock+0x170/0x170 [ 560.508443] ? rfcomm_dev_ioctl+0xdaa/0x2240 [ 560.512874] ? rfcomm_sock_ioctl+0x89/0xb0 [ 560.517128] ? sock_do_ioctl+0xe4/0x3e0 [ 560.521101] ? sock_ioctl+0x30d/0x680 [ 560.524908] ? do_vfs_ioctl+0x1de/0x1720 [ 560.528972] ? find_held_lock+0x36/0x1c0 [ 560.533054] ? __lock_is_held+0xb5/0x140 [ 560.537144] ? check_same_owner+0x340/0x340 [ 560.541487] ? rcu_note_context_switch+0x680/0x680 [ 560.546441] __should_failslab+0x124/0x180 [ 560.550689] should_failslab+0x9/0x14 [ 560.554491] kmem_cache_alloc+0x29c/0x710 [ 560.558666] __anon_vma_prepare+0x3c6/0x720 [ 560.563004] ? __lock_acquire+0x7fc/0x5020 [ 560.567255] ? anon_vma_fork+0x960/0x960 [ 560.571369] do_huge_pmd_anonymous_page+0x12e6/0x1bd0 [ 560.576565] ? mark_held_locks+0x160/0x160 [ 560.580810] ? __thp_get_unmapped_area+0x180/0x180 [ 560.585752] ? print_usage_bug+0xc0/0xc0 [ 560.590312] ? check_noncircular+0x20/0x20 [ 560.594558] ? print_usage_bug+0xc0/0xc0 [ 560.598613] ? __wake_up_common_lock+0x1d0/0x330 [ 560.603385] ? check_noncircular+0x20/0x20 [ 560.607631] ? pud_val+0x88/0x100 [ 560.611081] ? pmd_val+0x100/0x100 [ 560.614629] ? print_usage_bug+0xc0/0xc0 [ 560.618703] __handle_mm_fault+0x2caf/0x4350 [ 560.623125] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 560.627971] ? graph_lock+0x170/0x170 [ 560.631763] ? graph_lock+0x170/0x170 [ 560.635588] ? lock_downgrade+0x8f0/0x8f0 [ 560.639743] ? handle_mm_fault+0x8c4/0xc80 [ 560.643987] ? handle_mm_fault+0x8c4/0xc80 [ 560.648236] ? kasan_check_read+0x11/0x20 [ 560.652392] ? rcu_is_watching+0x8c/0x150 [ 560.656547] ? __do_page_fault+0x620/0xe50 [ 560.660778] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 560.665456] handle_mm_fault+0x53e/0xc80 [ 560.669530] ? __handle_mm_fault+0x4350/0x4350 [ 560.674122] ? find_vma+0x34/0x190 [ 560.677675] __do_page_fault+0x620/0xe50 [ 560.681750] ? mm_fault_error+0x380/0x380 [ 560.685904] ? graph_lock+0x170/0x170 [ 560.689719] do_page_fault+0xf6/0x7a4 [ 560.693529] ? vmalloc_sync_all+0x30/0x30 [ 560.697690] ? error_entry+0x76/0xd0 [ 560.701413] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 560.706443] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 560.711301] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 560.716360] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 560.721208] page_fault+0x1e/0x30 [ 560.724673] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 560.730295] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 560.749193] RSP: 0018:ffff8801c7047798 EFLAGS: 00010206 [ 560.754561] RAX: ffffed0038e08f1e RBX: 0000000000000018 RCX: 0000000000000003 [ 560.761832] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffff8801c70478d8 [ 560.769103] RBP: ffff8801c70477d0 R08: ffffed0038e08f1e R09: ffffed0038e08f1b [ 560.776383] R10: ffffed0038e08f1d R11: ffff8801c70478ef R12: 0000000020000018 [ 560.783652] R13: 0000000020000000 R14: ffff8801c70478d8 R15: 00007ffffffff000 [ 560.790954] ? _copy_from_user+0x10d/0x150 [ 560.795203] rfcomm_dev_ioctl+0xdaa/0x2240 [ 560.799450] ? mark_held_locks+0xc9/0x160 [ 560.803606] ? rfcomm_dev_state_change+0x150/0x150 [ 560.808530] ? lockdep_hardirqs_on+0x421/0x5c0 [ 560.813112] ? trace_hardirqs_on+0xbd/0x2c0 [ 560.817427] ? lock_release+0x9f0/0x9f0 [ 560.821414] ? lock_sock_nested+0xe7/0x120 [ 560.825656] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 560.830771] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 560.835375] ? kasan_check_write+0x14/0x20 [ 560.839608] ? lock_sock_nested+0x9f/0x120 [ 560.843843] ? __local_bh_enable_ip+0x161/0x230 [ 560.848524] rfcomm_sock_ioctl+0x89/0xb0 [ 560.852588] sock_do_ioctl+0xe4/0x3e0 [ 560.856392] ? compat_ifr_data_ioctl+0x170/0x170 [ 560.861156] ? kasan_check_read+0x11/0x20 [ 560.865314] ? rcu_is_watching+0x8c/0x150 [ 560.869478] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 560.874163] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 560.879377] sock_ioctl+0x30d/0x680 [ 560.883012] ? dlci_ioctl_set+0x40/0x40 [ 560.887018] ? ksys_dup3+0x690/0x690 [ 560.890752] ? find_held_lock+0x36/0x1c0 [ 560.894824] ? kasan_check_write+0x14/0x20 [ 560.899066] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 560.904009] ? dlci_ioctl_set+0x40/0x40 [ 560.907997] do_vfs_ioctl+0x1de/0x1720 [ 560.911887] ? __lock_is_held+0xb5/0x140 [ 560.915957] ? ioctl_preallocate+0x300/0x300 [ 560.920384] ? __fget_light+0x2f7/0x440 [ 560.924376] ? fget_raw+0x20/0x20 [ 560.927844] ? __sb_end_write+0xac/0xe0 [ 560.931827] ? fput+0x130/0x1a0 [ 560.935118] ? do_syscall_64+0x9a/0x820 [ 560.939101] ? do_syscall_64+0x9a/0x820 [ 560.943073] ? lockdep_hardirqs_on+0x421/0x5c0 [ 560.947671] ? security_file_ioctl+0x94/0xc0 [ 560.952095] ksys_ioctl+0xa9/0xd0 [ 560.955564] __x64_sys_ioctl+0x73/0xb0 [ 560.959461] do_syscall_64+0x1b9/0x820 [ 560.963372] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 560.968741] ? syscall_return_slowpath+0x5e0/0x5e0 [ 560.973678] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 560.978708] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 560.983722] ? recalc_sigpending_tsk+0x180/0x180 [ 560.988472] ? kasan_check_write+0x14/0x20 [ 560.992709] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 560.997553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 561.002735] RIP: 0033:0x457099 [ 561.005938] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 561.024837] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.032545] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 561.039810] RDX: 0000000020000000 RSI: 00000000400452c9 RDI: 0000000000000003 [ 561.047077] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 561.054356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 03:50:57 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x5452, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:57 executing program 0 (fault-call:2 fault-nth:2): r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) [ 561.061626] R13: 00000000004cf520 R14: 00000000004c57d2 R15: 0000000000000001 [ 561.131377] FAULT_INJECTION: forcing a failure. [ 561.131377] name failslab, interval 1, probability 0, space 0, times 0 [ 561.142795] CPU: 0 PID: 26718 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 561.151286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.160621] Call Trace: [ 561.163216] dump_stack+0x1c9/0x2b4 [ 561.166845] ? dump_stack_print_info.cold.2+0x52/0x52 [ 561.172041] should_fail.cold.4+0xa/0x11 [ 561.176116] ? __kernel_text_address+0xd/0x40 [ 561.180619] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 561.185732] ? __save_stack_trace+0x8d/0xf0 [ 561.190081] ? graph_lock+0x170/0x170 [ 561.193900] ? graph_lock+0x170/0x170 [ 561.197716] ? find_held_lock+0x36/0x1c0 [ 561.201787] ? __lock_is_held+0xb5/0x140 [ 561.205881] ? check_same_owner+0x340/0x340 [ 561.210208] ? lock_downgrade+0x8f0/0x8f0 [ 561.214355] ? rcu_note_context_switch+0x680/0x680 [ 561.219291] __should_failslab+0x124/0x180 [ 561.223521] should_failslab+0x9/0x14 [ 561.227336] kmem_cache_alloc+0x29c/0x710 [ 561.231519] __khugepaged_enter+0xbe/0x5e0 [ 561.235759] ? khugepaged+0xce0/0xce0 [ 561.239551] ? __anon_vma_prepare+0x36d/0x720 [ 561.244049] ? anon_vma_fork+0x960/0x960 [ 561.248118] do_huge_pmd_anonymous_page+0x138f/0x1bd0 [ 561.253321] ? mark_held_locks+0x160/0x160 [ 561.257574] ? __thp_get_unmapped_area+0x180/0x180 [ 561.262512] ? print_usage_bug+0xc0/0xc0 [ 561.266571] ? check_noncircular+0x20/0x20 [ 561.270804] ? print_usage_bug+0xc0/0xc0 [ 561.274868] ? __wake_up_common_lock+0x1d0/0x330 [ 561.279636] ? check_noncircular+0x20/0x20 [ 561.283881] ? pud_val+0x88/0x100 [ 561.287354] ? pmd_val+0x100/0x100 [ 561.290894] ? print_usage_bug+0xc0/0xc0 [ 561.294965] __handle_mm_fault+0x2caf/0x4350 [ 561.299387] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 561.304220] ? graph_lock+0x170/0x170 [ 561.308010] ? graph_lock+0x170/0x170 [ 561.311816] ? lock_downgrade+0x8f0/0x8f0 [ 561.315956] ? handle_mm_fault+0x8c4/0xc80 [ 561.320200] ? handle_mm_fault+0x8c4/0xc80 [ 561.324437] ? kasan_check_read+0x11/0x20 [ 561.328577] ? rcu_is_watching+0x8c/0x150 [ 561.332730] ? __do_page_fault+0x620/0xe50 [ 561.336966] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 561.341638] handle_mm_fault+0x53e/0xc80 [ 561.345702] ? __handle_mm_fault+0x4350/0x4350 [ 561.350273] ? find_vma+0x34/0x190 [ 561.353798] __do_page_fault+0x620/0xe50 [ 561.357848] ? mm_fault_error+0x380/0x380 [ 561.361996] ? graph_lock+0x170/0x170 [ 561.365798] do_page_fault+0xf6/0x7a4 [ 561.369595] ? vmalloc_sync_all+0x30/0x30 [ 561.373740] ? error_entry+0x76/0xd0 [ 561.377458] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 561.382473] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.387312] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 561.392361] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.397232] page_fault+0x1e/0x30 [ 561.400699] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 561.406314] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 561.425223] RSP: 0018:ffff8801880df798 EFLAGS: 00010206 [ 561.430577] RAX: ffffed003101bf1e RBX: 0000000000000018 RCX: 0000000000000003 [ 561.437842] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffff8801880df8d8 [ 561.445118] RBP: ffff8801880df7d0 R08: ffffed003101bf1e R09: ffffed003101bf1b [ 561.452409] R10: ffffed003101bf1d R11: ffff8801880df8ef R12: 0000000020000018 [ 561.459700] R13: 0000000020000000 R14: ffff8801880df8d8 R15: 00007ffffffff000 [ 561.466989] ? _copy_from_user+0x10d/0x150 [ 561.471211] rfcomm_dev_ioctl+0xdaa/0x2240 [ 561.475433] ? mark_held_locks+0xc9/0x160 [ 561.479578] ? rfcomm_dev_state_change+0x150/0x150 [ 561.484499] ? lockdep_hardirqs_on+0x421/0x5c0 [ 561.489089] ? trace_hardirqs_on+0xbd/0x2c0 [ 561.493406] ? lock_release+0x9f0/0x9f0 [ 561.497380] ? lock_sock_nested+0xe7/0x120 [ 561.501618] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 561.506717] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 561.511287] ? kasan_check_write+0x14/0x20 [ 561.515518] ? lock_sock_nested+0x9f/0x120 [ 561.519742] ? __local_bh_enable_ip+0x161/0x230 [ 561.524414] rfcomm_sock_ioctl+0x89/0xb0 [ 561.528477] sock_do_ioctl+0xe4/0x3e0 [ 561.532277] ? compat_ifr_data_ioctl+0x170/0x170 [ 561.537032] ? kasan_check_read+0x11/0x20 [ 561.541176] ? rcu_is_watching+0x8c/0x150 [ 561.545319] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 561.550014] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 561.555198] sock_ioctl+0x30d/0x680 [ 561.558828] ? dlci_ioctl_set+0x40/0x40 [ 561.562808] ? ksys_dup3+0x690/0x690 [ 561.566504] ? find_held_lock+0x36/0x1c0 [ 561.570553] ? kasan_check_write+0x14/0x20 [ 561.574773] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 561.579707] ? dlci_ioctl_set+0x40/0x40 [ 561.583687] do_vfs_ioctl+0x1de/0x1720 [ 561.587564] ? __lock_is_held+0xb5/0x140 [ 561.591622] ? ioctl_preallocate+0x300/0x300 [ 561.596040] ? __fget_light+0x2f7/0x440 [ 561.600025] ? fget_raw+0x20/0x20 [ 561.603483] ? __sb_end_write+0xac/0xe0 [ 561.607463] ? fput+0x130/0x1a0 [ 561.610734] ? do_syscall_64+0x9a/0x820 [ 561.614711] ? do_syscall_64+0x9a/0x820 [ 561.618680] ? lockdep_hardirqs_on+0x421/0x5c0 [ 561.623266] ? security_file_ioctl+0x94/0xc0 [ 561.627671] ksys_ioctl+0xa9/0xd0 [ 561.631133] __x64_sys_ioctl+0x73/0xb0 [ 561.635027] do_syscall_64+0x1b9/0x820 [ 561.638928] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 561.644291] ? syscall_return_slowpath+0x5e0/0x5e0 [ 561.649203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.654042] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 561.659047] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 561.664048] ? prepare_exit_to_usermode+0x291/0x3b0 [ 561.669052] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 561.673882] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 561.679055] RIP: 0033:0x457099 [ 561.682240] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 561.701142] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 561.708851] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 561.716116] RDX: 0000000020000000 RSI: 00000000400452c9 RDI: 0000000000000003 [ 561.723623] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 03:50:57 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0xe000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 561.730885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 561.738151] R13: 00000000004cf520 R14: 00000000004c57d2 R15: 0000000000000002 03:50:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:57 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x40000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:58 executing program 0 (fault-call:2 fault-nth:3): r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:50:58 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:58 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:58 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 561.937069] FAULT_INJECTION: forcing a failure. [ 561.937069] name failslab, interval 1, probability 0, space 0, times 0 [ 561.948443] CPU: 0 PID: 26749 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 561.956941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 561.966297] Call Trace: [ 561.968874] dump_stack+0x1c9/0x2b4 [ 561.972492] ? dump_stack_print_info.cold.2+0x52/0x52 [ 561.977699] should_fail.cold.4+0xa/0x11 [ 561.981767] ? __kernel_text_address+0xd/0x40 [ 561.986273] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 561.991383] ? __save_stack_trace+0x8d/0xf0 [ 561.995723] ? graph_lock+0x170/0x170 [ 561.999530] ? graph_lock+0x170/0x170 [ 562.003346] ? find_held_lock+0x36/0x1c0 [ 562.007407] ? __lock_is_held+0xb5/0x140 [ 562.011462] ? check_same_owner+0x340/0x340 [ 562.015782] ? lock_downgrade+0x8f0/0x8f0 [ 562.019934] ? rcu_note_context_switch+0x680/0x680 [ 562.024919] __should_failslab+0x124/0x180 [ 562.029169] should_failslab+0x9/0x14 [ 562.033002] kmem_cache_alloc+0x29c/0x710 [ 562.037160] __khugepaged_enter+0xbe/0x5e0 [ 562.041394] ? khugepaged+0xce0/0xce0 [ 562.045190] ? __anon_vma_prepare+0x36d/0x720 [ 562.049700] ? anon_vma_fork+0x960/0x960 [ 562.053787] do_huge_pmd_anonymous_page+0x138f/0x1bd0 [ 562.058972] ? mark_held_locks+0x160/0x160 [ 562.063200] ? __thp_get_unmapped_area+0x180/0x180 [ 562.068134] ? print_usage_bug+0xc0/0xc0 [ 562.072200] ? check_noncircular+0x20/0x20 [ 562.076453] ? print_usage_bug+0xc0/0xc0 [ 562.080517] ? __wake_up_common_lock+0x1d0/0x330 [ 562.085264] ? check_noncircular+0x20/0x20 [ 562.089493] ? pud_val+0x88/0x100 [ 562.092952] ? pmd_val+0x100/0x100 [ 562.096489] ? print_usage_bug+0xc0/0xc0 [ 562.100557] __handle_mm_fault+0x2caf/0x4350 [ 562.104972] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 562.109819] ? graph_lock+0x170/0x170 [ 562.113631] ? graph_lock+0x170/0x170 [ 562.117481] ? lock_downgrade+0x8f0/0x8f0 [ 562.121628] ? handle_mm_fault+0x8c4/0xc80 [ 562.125875] ? handle_mm_fault+0x8c4/0xc80 [ 562.130114] ? kasan_check_read+0x11/0x20 [ 562.134271] ? rcu_is_watching+0x8c/0x150 [ 562.138431] ? __do_page_fault+0x620/0xe50 [ 562.142677] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 562.147383] handle_mm_fault+0x53e/0xc80 [ 562.151444] ? __handle_mm_fault+0x4350/0x4350 [ 562.156032] ? find_vma+0x34/0x190 [ 562.159585] __do_page_fault+0x620/0xe50 [ 562.163658] ? mm_fault_error+0x380/0x380 [ 562.167817] ? graph_lock+0x170/0x170 [ 562.171625] do_page_fault+0xf6/0x7a4 [ 562.175433] ? vmalloc_sync_all+0x30/0x30 [ 562.179586] ? error_entry+0x76/0xd0 [ 562.183299] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 562.188347] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.193190] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 562.198224] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.203070] page_fault+0x1e/0x30 [ 562.206522] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 562.212158] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 562.231055] RSP: 0018:ffff88018800f798 EFLAGS: 00010206 [ 562.236432] RAX: ffffed0031001f1e RBX: 0000000000000018 RCX: 0000000000000003 [ 562.243701] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffff88018800f8d8 [ 562.250975] RBP: ffff88018800f7d0 R08: ffffed0031001f1e R09: ffffed0031001f1b [ 562.258243] R10: ffffed0031001f1d R11: ffff88018800f8ef R12: 0000000020000018 [ 562.265512] R13: 0000000020000000 R14: ffff88018800f8d8 R15: 00007ffffffff000 [ 562.272819] ? _copy_from_user+0x10d/0x150 [ 562.277071] rfcomm_dev_ioctl+0xdaa/0x2240 [ 562.281312] ? mark_held_locks+0xc9/0x160 [ 562.285478] ? rfcomm_dev_state_change+0x150/0x150 [ 562.290403] ? lockdep_hardirqs_on+0x421/0x5c0 [ 562.294992] ? trace_hardirqs_on+0xbd/0x2c0 [ 562.299322] ? lock_release+0x9f0/0x9f0 [ 562.303314] ? lock_sock_nested+0xe7/0x120 [ 562.307572] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 562.312684] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 562.317281] ? kasan_check_write+0x14/0x20 [ 562.321524] ? lock_sock_nested+0x9f/0x120 [ 562.325770] ? __local_bh_enable_ip+0x161/0x230 [ 562.330456] rfcomm_sock_ioctl+0x89/0xb0 [ 562.334531] sock_do_ioctl+0xe4/0x3e0 [ 562.338343] ? compat_ifr_data_ioctl+0x170/0x170 [ 562.343121] ? kasan_check_read+0x11/0x20 [ 562.347282] ? rcu_is_watching+0x8c/0x150 [ 562.351430] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 562.356122] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 562.361322] sock_ioctl+0x30d/0x680 [ 562.364986] ? dlci_ioctl_set+0x40/0x40 [ 562.368985] ? ksys_dup3+0x690/0x690 [ 562.372708] ? find_held_lock+0x36/0x1c0 [ 562.376779] ? kasan_check_write+0x14/0x20 [ 562.381026] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 562.385966] ? dlci_ioctl_set+0x40/0x40 [ 562.389952] do_vfs_ioctl+0x1de/0x1720 [ 562.393837] ? __lock_is_held+0xb5/0x140 [ 562.397901] ? ioctl_preallocate+0x300/0x300 [ 562.402322] ? __fget_light+0x2f7/0x440 [ 562.406322] ? fget_raw+0x20/0x20 [ 562.409794] ? __sb_end_write+0xac/0xe0 [ 562.413786] ? fput+0x130/0x1a0 [ 562.417071] ? do_syscall_64+0x9a/0x820 [ 562.421052] ? do_syscall_64+0x9a/0x820 [ 562.425033] ? lockdep_hardirqs_on+0x421/0x5c0 [ 562.429618] ? security_file_ioctl+0x94/0xc0 [ 562.434048] ksys_ioctl+0xa9/0xd0 [ 562.437508] __x64_sys_ioctl+0x73/0xb0 [ 562.441409] do_syscall_64+0x1b9/0x820 [ 562.445306] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 562.450696] ? syscall_return_slowpath+0x5e0/0x5e0 [ 562.455665] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 562.460721] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 562.465749] ? recalc_sigpending_tsk+0x180/0x180 [ 562.470510] ? kasan_check_write+0x14/0x20 [ 562.474757] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.479632] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 562.484830] RIP: 0033:0x457099 [ 562.488034] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 562.506930] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 562.514647] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 562.521915] RDX: 0000000020000000 RSI: 00000000400452c9 RDI: 0000000000000003 [ 562.529174] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 03:50:58 executing program 0 (fault-call:2 fault-nth:4): r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:50:58 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0045878, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 562.536438] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 [ 562.543712] R13: 00000000004cf520 R14: 00000000004c57d2 R15: 0000000000000003 [ 562.607212] FAULT_INJECTION: forcing a failure. [ 562.607212] name failslab, interval 1, probability 0, space 0, times 0 [ 562.618757] CPU: 1 PID: 26772 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 562.627250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 562.636585] Call Trace: [ 562.639163] dump_stack+0x1c9/0x2b4 [ 562.642779] ? dump_stack_print_info.cold.2+0x52/0x52 [ 562.647995] should_fail.cold.4+0xa/0x11 [ 562.652053] ? graph_lock+0x170/0x170 [ 562.655894] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 562.661049] ? graph_lock+0x170/0x170 [ 562.664854] ? find_held_lock+0x36/0x1c0 [ 562.668938] ? __lock_is_held+0xb5/0x140 [ 562.673028] ? check_same_owner+0x340/0x340 [ 562.677364] ? rcu_note_context_switch+0x680/0x680 [ 562.682309] ? khugepaged+0xce0/0xce0 [ 562.686143] __should_failslab+0x124/0x180 [ 562.690407] should_failslab+0x9/0x14 [ 562.694231] kmem_cache_alloc+0x29c/0x710 [ 562.698385] ? anon_vma_fork+0x960/0x960 [ 562.702470] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 562.708031] ptlock_alloc+0x20/0x80 [ 562.711669] pte_alloc_one+0x6b/0x1a0 [ 562.715484] do_huge_pmd_anonymous_page+0xc9e/0x1bd0 [ 562.720589] ? mark_held_locks+0x160/0x160 [ 562.724843] ? __thp_get_unmapped_area+0x180/0x180 [ 562.729810] ? print_usage_bug+0xc0/0xc0 [ 562.733867] ? check_noncircular+0x20/0x20 [ 562.738102] ? print_usage_bug+0xc0/0xc0 [ 562.742166] ? __wake_up_common_lock+0x1d0/0x330 [ 562.746937] ? check_noncircular+0x20/0x20 [ 562.751174] ? pud_val+0x88/0x100 [ 562.754636] ? pmd_val+0x100/0x100 [ 562.758191] ? print_usage_bug+0xc0/0xc0 [ 562.762280] __handle_mm_fault+0x2caf/0x4350 [ 562.766711] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 562.771558] ? graph_lock+0x170/0x170 [ 562.775356] ? graph_lock+0x170/0x170 [ 562.779178] ? lock_downgrade+0x8f0/0x8f0 [ 562.783334] ? handle_mm_fault+0x8c4/0xc80 [ 562.787565] ? handle_mm_fault+0x8c4/0xc80 [ 562.791812] ? kasan_check_read+0x11/0x20 [ 562.796001] ? rcu_is_watching+0x8c/0x150 [ 562.800150] ? __do_page_fault+0x620/0xe50 [ 562.804371] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 562.809030] handle_mm_fault+0x53e/0xc80 [ 562.813080] ? __handle_mm_fault+0x4350/0x4350 [ 562.817658] ? find_vma+0x34/0x190 [ 562.821214] __do_page_fault+0x620/0xe50 [ 562.825292] ? mm_fault_error+0x380/0x380 [ 562.829449] ? graph_lock+0x170/0x170 [ 562.833241] do_page_fault+0xf6/0x7a4 [ 562.837037] ? vmalloc_sync_all+0x30/0x30 [ 562.841187] ? error_entry+0x76/0xd0 [ 562.844893] ? trace_hardirqs_off_caller+0xbb/0x2b0 [ 562.849906] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.854750] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 562.859772] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 562.864629] page_fault+0x1e/0x30 [ 562.868079] RIP: 0010:copy_user_generic_unrolled+0x86/0xc0 [ 562.873696] Code: 4c 8b 5e 38 4c 89 47 20 4c 89 4f 28 4c 89 57 30 4c 89 5f 38 48 8d 76 40 48 8d 7f 40 ff c9 75 b6 89 d1 83 e2 07 c1 e9 03 74 12 <4c> 8b 06 4c 89 07 48 8d 76 08 48 8d 7f 08 ff c9 75 ee 21 d2 74 10 [ 562.892600] RSP: 0018:ffff88019269f798 EFLAGS: 00010206 [ 562.897970] RAX: ffffed00324d3f1e RBX: 0000000000000018 RCX: 0000000000000003 [ 562.905246] RDX: 0000000000000000 RSI: 0000000020000000 RDI: ffff88019269f8d8 [ 562.912523] RBP: ffff88019269f7d0 R08: ffffed00324d3f1e R09: ffffed00324d3f1b [ 562.919794] R10: ffffed00324d3f1d R11: ffff88019269f8ef R12: 0000000020000018 [ 562.927065] R13: 0000000020000000 R14: ffff88019269f8d8 R15: 00007ffffffff000 [ 562.934385] ? _copy_from_user+0x10d/0x150 [ 562.938633] rfcomm_dev_ioctl+0xdaa/0x2240 [ 562.942883] ? mark_held_locks+0xc9/0x160 [ 562.947038] ? rfcomm_dev_state_change+0x150/0x150 [ 562.951965] ? lockdep_hardirqs_on+0x421/0x5c0 [ 562.956548] ? trace_hardirqs_on+0xbd/0x2c0 [ 562.960872] ? lock_release+0x9f0/0x9f0 [ 562.964845] ? lock_sock_nested+0xe7/0x120 [ 562.969071] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 562.974170] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 562.978751] ? kasan_check_write+0x14/0x20 [ 562.982975] ? lock_sock_nested+0x9f/0x120 [ 562.987212] ? __local_bh_enable_ip+0x161/0x230 [ 562.991904] rfcomm_sock_ioctl+0x89/0xb0 [ 562.995971] sock_do_ioctl+0xe4/0x3e0 [ 562.999762] ? compat_ifr_data_ioctl+0x170/0x170 [ 563.004505] ? kasan_check_read+0x11/0x20 [ 563.008638] ? rcu_is_watching+0x8c/0x150 [ 563.012808] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 563.017484] ? __sanitizer_cov_trace_switch+0x53/0x90 [ 563.022674] sock_ioctl+0x30d/0x680 [ 563.026315] ? dlci_ioctl_set+0x40/0x40 [ 563.030298] ? ksys_dup3+0x690/0x690 [ 563.033995] ? find_held_lock+0x36/0x1c0 [ 563.038043] ? kasan_check_write+0x14/0x20 [ 563.042274] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 563.047204] ? dlci_ioctl_set+0x40/0x40 [ 563.051167] do_vfs_ioctl+0x1de/0x1720 [ 563.055042] ? __lock_is_held+0xb5/0x140 [ 563.059092] ? ioctl_preallocate+0x300/0x300 [ 563.063493] ? __fget_light+0x2f7/0x440 [ 563.067453] ? fget_raw+0x20/0x20 [ 563.070894] ? __sb_end_write+0xac/0xe0 [ 563.074885] ? fput+0x130/0x1a0 [ 563.078173] ? do_syscall_64+0x9a/0x820 [ 563.082146] ? do_syscall_64+0x9a/0x820 [ 563.086121] ? lockdep_hardirqs_on+0x421/0x5c0 [ 563.090716] ? security_file_ioctl+0x94/0xc0 [ 563.095128] ksys_ioctl+0xa9/0xd0 [ 563.098594] __x64_sys_ioctl+0x73/0xb0 [ 563.102479] do_syscall_64+0x1b9/0x820 [ 563.106370] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 563.111726] ? syscall_return_slowpath+0x5e0/0x5e0 [ 563.116646] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 563.121670] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 563.126693] ? recalc_sigpending_tsk+0x180/0x180 [ 563.131451] ? kasan_check_write+0x14/0x20 [ 563.135703] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 563.140549] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 563.145794] RIP: 0033:0x457099 [ 563.148983] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 563.167884] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 563.175591] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 563.182842] RDX: 0000000020000000 RSI: 00000000400452c9 RDI: 0000000000000003 [ 563.190100] RBP: 00000000009300a0 R08: 0000000000000000 R09: 0000000000000000 [ 563.197369] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000005 03:50:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:59 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:59 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 563.204622] R13: 00000000004cf520 R14: 00000000004c57d2 R15: 0000000000000004 03:50:59 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:59 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x8700, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:59 executing program 0 (fault-call:2 fault-nth:5): r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:50:59 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0xe000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x541b, &(0x7f0000000000)=ANY=[]) 03:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8902, &(0x7f0000000000)=ANY=[]) 03:50:59 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc020660b, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8983, &(0x7f0000000000)=ANY=[]) 03:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8907, &(0x7f0000000000)=ANY=[]) 03:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8981, &(0x7f0000000000)=ANY=[]) 03:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8903, &(0x7f0000000000)=ANY=[]) 03:50:59 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x5460, &(0x7f0000000000)=ANY=[]) 03:51:00 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:00 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:00 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:00 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0xe00, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x5451, &(0x7f0000000000)=ANY=[]) 03:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8906, &(0x7f0000000000)=ANY=[]) 03:51:00 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x1f00000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x2, &(0x7f0000000000)=ANY=[]) 03:51:00 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x5450, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0xc0189436, &(0x7f0000000000)=ANY=[]) 03:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x5452, &(0x7f0000000000)=ANY=[]) 03:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x40049409, &(0x7f0000000000)=ANY=[]) 03:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0xc020660b, &(0x7f0000000000)=ANY=[]) 03:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x5421, &(0x7f0000000000)=ANY=[]) 03:51:00 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8901, &(0x7f0000000000)=ANY=[]) 03:51:01 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x89a1, &(0x7f0000000000)=ANY=[]) 03:51:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:01 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:01 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:01 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x4000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8904, &(0x7f0000000000)=ANY=[]) 03:51:01 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0xe00000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:01 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x2, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x894c, &(0x7f0000000000)=ANY=[]) 03:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x800452d3, &(0x7f0000000000)=ANY=[]) 03:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8982, &(0x7f0000000000)=ANY=[]) 03:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x800452d2, &(0x7f0000000000)=ANY=[]) 03:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8980, &(0x7f0000000000)=ANY=[]) 03:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0xc0045878, &(0x7f0000000000)=ANY=[]) 03:51:01 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c8, &(0x7f0000000000)=ANY=[]) 03:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x5411, &(0x7f0000000000)=ANY=[]) 03:51:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:02 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:02 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:02 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0xc0045878, &(0x7f0000000000)=ANY=[]) 03:51:02 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0xfeffffff00000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8941, &(0x7f0000000000)=ANY=[]) 03:51:02 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x4000000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:02 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x5460, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x4020940d, &(0x7f0000000000)=ANY=[]) 03:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x8940, &(0x7f0000000000)=ANY=[]) 03:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x89a0, &(0x7f0000000000)=ANY=[]) 03:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x5450, &(0x7f0000000000)=ANY=[]) 03:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400020, 0x20000) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x1, 0x2}) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x3c, 0x1, 0xc, 0xc, 0xa, 0xf77, 0x3, 0x13f, 0x1}}) 03:51:02 executing program 0: socketpair$nbd(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000040)=ANY=[@ANYRES16=r1]) 03:51:02 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000000)={0xb3, 0x200, 0x1, 0xfffffffffffffffa, 0x9, [{0xfffffffffffff801, 0x7f, 0x6}, {0x100, 0x3, 0x100000000, 0x0, 0x0, 0x5}, {0x0, 0x4, 0x9, 0x0, 0x0, 0x800}, {0x9, 0xbf, 0x6, 0x0, 0x0, 0x8}, {0x0, 0x3, 0x9, 0x0, 0x0, 0x2002}, {0x1ff, 0x7, 0x10000, 0x0, 0x0, 0x8c}, {0x7, 0xffff, 0x9, 0x0, 0x0, 0x1b80}, {0x3, 0x8, 0x7d, 0x0, 0x0, 0x2008}, {0xe6, 0x3f, 0xffffffffffffff9d, 0x0, 0x0, 0x2000}]}) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0xc000, 0x0) getsockname(r0, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000300)=0x80) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000100)={{{@in=@rand_addr, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000400)=0xe8) r4 = getegid() write$FUSE_ENTRY(r1, &(0x7f0000000440)={0x90, 0xfffffffffffffffe, 0x7, {0x1, 0x3, 0xc65, 0x7ff, 0x2, 0xec1a, {0x5, 0xc2ec, 0x5514, 0x7f, 0x101, 0xffffffffffffffff, 0x450b5a90, 0x2, 0x0, 0x0, 0x7, r3, r4, 0x10001, 0x5b5}}}, 0x90) sendmsg$nl_route(r1, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0xa000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYPTR, @ANYRES32=r2, @ANYBLOB='@\x00\x00\x00\x00\x00\x00\x00'], 0x3}, 0x1, 0x0, 0x0, 0xf4505f9eacf85fd5}, 0x80) r5 = dup(r0) ioctl$KVM_GET_REG_LIST(r5, 0x400452c9, &(0x7f0000000000)=ANY=[]) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r5, 0x4010ae67, &(0x7f0000000500)={0x10000, 0x10000}) ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_DEBUGREGS(r5, 0x4080aea2, &(0x7f0000000080)={[0x3000, 0x1f000, 0x100000, 0x105000], 0x3, 0x0, 0x7}) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae47, &(0x7f0000000200)) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000040)=0x4) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000000)={'ip6tnl0\x00', 0x4800}) 03:51:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:03 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) syz_read_part_table(0x9, 0x4, &(0x7f00000012c0)=[{&(0x7f00000000c0)="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", 0x1000, 0x3ff}, {&(0x7f00000010c0)="62ba78845955fa2df7469aee9c37e54840593a304a426d3db73eba0f68de27b195fc7b49f7e308d502db0b29ff874558c930a6c67f4b37a2074b7df2be5f38c912eae991be6e6673537aff86ec2b7d7700ee4b85410814408153", 0x5a, 0x7}, {&(0x7f0000001140)="9c20f4220099fe218cd61a4f263123affc6153572ac3226d7d1d302b2eee98d3614e6913e6701fef687e06a56184064507d8d803ec7e980dd262e6e06c16bd5188fde02865aa9a303db85cd0296c8205a4406f2e32d0022fa2187f9fbd6acd2b8183", 0x62, 0x3}, {&(0x7f00000011c0)="1bec619c289f27f66278a5d3396a36031a79493c49bb5df192a67aed5773470fbf8beebd8d50bc093cfb5a7291f1b16a8c844c95b3647f828d78d3da7b75cac4ed0158dbab9da21295e0c9b86eeb941c44d56139bf341cf34deee5ba29c3db735b2e86cf098cc865091c431c188cc6d40cbacd353aea664fbfd09623d2a27aa8ca932ca0fd0a9436f157db285a65bd19a9e13bd653796430f670e85b6af8805da82d00e5df5b3f93ad0e3fb001c5df6ef3e80bd43bad695134e28fa8f5a9fe78c044a452a3a3", 0xc6, 0x7}]) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000080)=ANY=[@ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32=r1, @ANYRESOCT=r1], @ANYPTR=&(0x7f0000000040)=ANY=[@ANYRES16=r1, @ANYRES64=r1, @ANYRES16=r0], @ANYRES64=0x0, @ANYRESDEC=r0]) 03:51:03 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:03 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:03 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x8700000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:03 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x80045301, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:03 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0xfeffffff, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cgroup.stat\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000180)=0x5, 0x4) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000340)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYPTR64=&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=r0, @ANYRES32=r0, @ANYRESOCT=r0, @ANYRES64=r2], @ANYRES64=r0, @ANYRES64=r0, @ANYRES64=r2, @ANYPTR64=&(0x7f0000000040)=ANY=[@ANYBLOB="41470b2955dc716ba5e3da11548e5a41a46b68aa093553a50501ab31ce90517400794806edfa593a82f03196c4ea4558eff33af51bccc4a423dcdea503a446165fa9c9b41f7bd9e7742edb6a9e0ec530e1400c0e80b84374312485084f11c170d76bd5374fa2fe274a48c52d79c4fdd51379e6313fd9b061bfad55814df094db79b00ffb5fc50cba4bacd65651ac57074518201f94d29f6040b2559922373b6d110b28977557bbdca4f2478503a0ea98f370502c05dd0f18b42ec64afdf47c6b7fa3dd1cb68e745024f5d3ab", @ANYRESHEX=r2], @ANYRES16=r0, @ANYRES16]) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f00000001c0)) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000000)={0x0, 0x9}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={r2, 0xa4, "a8c80b6d0d8ad7a505af756196ea8c74b84d1bd05d252078409c29cb0ff2cdfc530534b57e9a9e577390e6718ce9ce6c84283c63c937018be0bb4b448b444110342ea8428406e1e6f7e7f4c8de12bb1313d774e04077ff20c5b74b4976ea8dd40d691884f0b5c6607fc72ecc73c91c98440972188328dea0307f9667c65d0a8cdbbac2e210e5c08f357caceda84083fad688a3aad7dc39038fae81385937c58533d05553"}, &(0x7f0000000140)=0xac) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) fcntl$setsig(r0, 0xa, 0x10) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) socketpair(0x15, 0x0, 0x1, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000100)={{{@in=@rand_addr, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000440)=0xe8) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)={0xd, 0x9, 0xfffffffffffffffe, 0x3f, 0x18, r2, 0x2}, 0x2c) setsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000480)={r3}, 0xc) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r2, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000400)={&(0x7f00000002c0)=ANY=[@ANYRES16, @ANYRES16=r4, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000700)=ANY=[@ANYRESDEC=r1, @ANYBLOB="f0f00a6e0033a9fed8d62b662eba7574e44f5d8970871f9418ded176e1a2e0fc348515fcb56fca63e166c10ff947191f7faef3898e7f4f87274ba34db0af7d0198243b676e75809019f79aafd7eb2adf5b3e4ae75f72b123b66d5e02e76912a86fb92c9dfefe7c245bbc0230014bc2ab0240c2b8246ec4b0dce293c300270628ad9cff3212c895e8af6bda41d313f97ff3426bec86888fdc57bbe4f04028f4b919a49c3da0427b3a16e3eb1c13c331b4d565d339abb0263c52673e960dd617a8cca77b4d0365680d4aab7bec37aa0c23272bdbca04f558a37ad0efad71672fc62d72faa40ad35096f04f90e6177b6c", @ANYPTR64=&(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYBLOB="b7c0bf7404feefcdf5cdd8f6f315e854f02f2b634fdda936446eb2a654da377d14cdb0248f3b0c42b28231aa1d44b187dc0e9b6e5910388e6152550315e81c963f37fd4d4d295d95c465f1a37724311e8ff5175a239b4d6b47584c4133f1bf39dff6bf4a5da48cf6c258b13441b230485f737fb737897d642729ff27c5a7c6eff32aaa6f9f299aa7e28597cbd5cd8f3fa419664230485764665f84f8c7850f45b648bae4e76dcf24a5847edc240c46a28acbd58b8ccdbd62e2ed1413bfc7754b3e124443e9ec"], @ANYPTR=&(0x7f0000001940)=ANY=[@ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR64, @ANYRES32=r4, @ANYRESDEC=r2, @ANYRESOCT=r5, @ANYRES32=r5, @ANYRESHEX=r5, @ANYRESOCT=0x0, @ANYPTR], @ANYRESOCT=r4, @ANYRESHEX=r4, @ANYRES64=r2, @ANYPTR=&(0x7f0000001880)=ANY=[@ANYBLOB="437d9827f2d8f2f45b349af5f640ed7c02511c3b9cc8304a8087d924accf34700ca3d6b756c53b4b6a0e3f6bf29605caafccfe11bd8427e053c1b6b0ec3117b7d2ebcbbf2894b30ff495c1a24f7256bd16e535595977b4972f98cb26ce7f63a07cf1c8ad", @ANYRESOCT=0x0, @ANYRES16=r0, @ANYRESHEX], @ANYRES16=r0, @ANYRESHEX=0x0, @ANYRES64=r1, @ANYRESOCT=r4], @ANYBLOB="25eaa2a5f2c1cc2af5d3898d07d5d563480947ec685e10ad717059e36b884ede7ea316743401806f5a97c87115268950d9ed532d791a3218e33509b8ee7a51109017ea59d9d79c7ff3659f105bf28d0057", @ANYBLOB="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"]) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x200000, 0x0) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f00000000c0)=ANY=[]) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000)={0x10000, 0x2, 0x3, 0xffffffffffffc4df, 0x5}, 0x14) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) bind$bt_sco(r0, &(0x7f0000000000)={0x1f, {0xffffffff7fffffff, 0x9, 0x100000000, 0x2, 0xffffffffffff65c7, 0x6}}, 0x8) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000100)={'vlan0\x00', {0x2, 0x4e24, @loopback}}) ioctl$TUNSETVNETLE(r1, 0x400454dc, &(0x7f00000000c0)) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000140)) sendto(r0, &(0x7f0000000000)="0f1b7d0c95033195d5dbf92830f10995ca5bf72df2a962475a9d437191740c4a2e62687e6098e86333a4aa8377", 0x2d, 0x40000, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @loopback}, 0x1, 0x0, 0x4}}, 0x80) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:03 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x82, 0x0) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) fcntl$setlease(r0, 0x400, 0x1) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x20201, 0x0) 03:51:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x6f30, 0x48000) 03:51:04 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:04 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:04 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:04 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x40000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:04 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x5451, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:04 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x1f000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000040)=0x40) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:04 executing program 0: socketpair(0x7, 0x3, 0x6, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x7c) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r3 = socket$inet6(0xa, 0x802, 0x0) ioctl(r3, 0x100008912, &(0x7f0000000100)="025cc80700145f8f764070") r4 = add_key$keyring(&(0x7f0000001b40)='keyring\x00', &(0x7f0000000100), 0x0, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0xa}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) keyctl$read(0x4, r4, &(0x7f0000000200)=""/56, 0xa) keyctl$setperm(0x5, r4, 0x20000800) setgroups(0x176, &(0x7f0000000080)) keyctl$get_security(0x3, r4, &(0x7f0000000240)=""/4096, 0x1000) r5 = dup(r2) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f00000000c0)={0x0, 0xc4, "af9905e3eb9e1a8e3bcb1f8226ecc2343407e02333d0f4adf36f9b18ba8ce2748c1b4f2da09aaedd66ddb243ad7ddb9440f49f7be09de892ee42c7cac7221a27d762044cfe7f090580a7eefb4d74557786739bbf81313e524c448dbb0947f027506ccb9da80624818dd3d992de3a58c958d833342fb195f710e1860c4a576e520d3dd239b09cf8661d96d044d923f01184708fb7aa64f5f675b478568e3a0a90acbfaf148a31e35524fec9c69114181d33392de42a01645f1600f7793439372e62c8c781"}, &(0x7f00000001c0)=0xcc) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000200)={r6, 0x81}, 0x8) ioctl$KVM_GET_REG_LIST(r5, 0x400452c9, &(0x7f0000000380)=ANY=[@ANYPTR, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRES64=r6, @ANYRESOCT=r5, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES32, @ANYRES32=0x0, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYRES32, @ANYRESOCT=r6, @ANYRESOCT=r5, @ANYRESHEX=0x0, @ANYPTR, @ANYRESHEX=r2, @ANYRESOCT]], @ANYRESHEX=r5]) openat$kvm(0xffffffffffffff9c, &(0x7f0000001240)='/dev/kvm\x00', 0x101100, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000000)={{0x8, 0x5f}, {0x3e8, 0x3dd4cfa2}, 0x1f, 0x2, 0x1ff}) 03:51:04 executing program 0: syz_read_part_table(0xc2, 0x1, &(0x7f00000001c0)=[{&(0x7f0000000100)="792ad621d5304fc275aee12aba56cebb186705b52855573f38304fd28176c98db8e50ab0a91668414def7d19548ee53f0452acc7def01b067091fe655bda42c2f61c8fc7f22944d48d786b0eb8aa66a043f58163f603e4c954a712a507630534b760e9f3551288c429e7f502dccf556a0394ec4ecc53a1f1d8f6d4b40b03d7918791f1eef67ed0477a7837d7a1171ba82053c66d6f723b3e8c91a13bc6e0199771d729f965d218adb5", 0xa9, 0x98}]) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000080)=ANY=[@ANYRES64=r0, @ANYPTR=&(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRESOCT=r0, @ANYRESHEX=r1, @ANYRES64, @ANYRESDEC=r0, @ANYRESHEX=r0], @ANYRESOCT=r0, @ANYRESDEC=r0, @ANYPTR64]) 03:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$RTC_PIE_ON(r1, 0x7005) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) accept4$alg(r1, 0x0, 0x0, 0x804) 03:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x400040, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000080)) r2 = dup2(r0, r0) ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0) r3 = dup(r0) ioctl$KVM_GET_REG_LIST(r3, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000000)={r3}) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f00000000c0)) 03:51:04 executing program 0: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$BLKGETSIZE64(r0, 0x80081272, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000540)=ANY=[@ANYBLOB="7ab69c3f0c0115fb34f1dc50f857076b372449f035cae330052855e9160567aff0ecad93ec396f21668b5d5364d84dd3bf13ced36f6a0a500cb44227f95dde272afac5c0b7355f34a14210ce2e6b6d50d1bd44604a2c0a456b32b9986868b9433fcf6b7ee89a389a740978c6503b98c13c1fe3a09f96b42217300f32abfe6a2f6cbfbe0dce0fd6cd824a688d", @ANYRESHEX=r2, @ANYRES32=r0, @ANYBLOB="95788f90a7f49130ce0cf08b40ccc280e420bbe56fbb931d447b836ec63f0b38a58079b6b5f59ce964ec2dc3b347e582ae7e8660fcec647ef594a918dca35fe5438d38c34e06b6fcdbdad89a2e9ffb21a6d5e2731f48ff5f8de6df004cef7ab70b804c8df81daa990033d625aa10fe71", @ANYBLOB="1cdb215e675c6904e1ccba0eb65d22d4fd3a69af805f3b8d534a79c4a04bd5982bc326c536c91b3bed904b7cc139250e1feed27d24f0ab8a0ba6821868b97a2988695692887a9c6f3c29c3aff97526b9f2b5c3993019b3ceec22838fdd1e9b60ae6d394c29632c71cbee97201be73af294108104f0ac297bf0f6115a4b6ad81ee32b0c775e0a7f2cc4472c3de0cc754f7dfe01001cb89b1e9647d4eded7347ce2a4cbd457389e47d9c2108c38cb469386e3d7fc581ccd6d384187967adec43a3608002470a59103e3157e8fde94647ea6db103553717fe4b653b0e3675189dac461549642a06a7124d1be1e17e4993b10615cb7ccb3b4183"]) openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x501000, 0x0) 03:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e20, @multicast1}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x80}}, 0x1e) [ 568.374839] QAT: Invalid ioctl [ 568.380852] QAT: Invalid ioctl 03:51:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:04 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) write$P9_ROPEN(r1, &(0x7f0000000040)={0x18, 0x71, 0x2, {{0x10, 0x2, 0x8}, 0x2}}, 0x18) write$P9_RMKDIR(r1, &(0x7f0000000000)={0x14, 0x49, 0x1, {0x10, 0x0, 0x8}}, 0x14) 03:51:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:05 executing program 0: r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x1000, 0x100) ioctl$KDADDIO(r0, 0x4b34, 0x6) syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$RNDZAPENTCNT(r0, 0x5204, &(0x7f0000000080)=0xb4) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes128, 0x2, "2d323a3e42bcb7db"}) 03:51:05 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:05 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x87000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:05 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x80045300, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:05 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:05 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x4000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0, 0xe44d}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000080)={r2, 0x3e, "2e4a8346a82e4f3c7a82fe174f0a25487d22473dfb784a9d2ccbe316d60f366be265daac00e4da7638c951eb07281340dc5dfb59eabd0160e44b8e1be51d"}, &(0x7f0000000100)=0x46) 03:51:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000)=0xb20, 0x4) 03:51:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x42, 0x4) ioctl$RTC_WKALM_RD(r1, 0x80287010, &(0x7f0000000000)) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:05 executing program 0: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) bind$unix(r1, &(0x7f0000000180)=@file={0x1, './file0\x00'}, 0x6e) setsockopt$sock_int(r0, 0x1, 0x10, &(0x7f0000000240)=0x101, 0x4) connect$unix(r0, &(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e) r3 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000140)='/dev/full\x00', 0x200100, 0x0) ioctl$KVM_GET_REGS(r4, 0x8090ae81, &(0x7f0000000180)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000240)={0x2, 0x3, 0x5}) get_thread_area(&(0x7f00000002c0)={0x0, 0x100000, 0x1000, 0x0, 0x1, 0x100, 0x5, 0x4f8e, 0x5, 0x9}) getsockopt$bt_sco_SCO_OPTIONS(r3, 0x11, 0x1, &(0x7f0000000000)=""/215, &(0x7f0000000100)=0xd7) sendmsg$nl_netfilter(r4, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x2020042}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2b0, 0x12, 0x7, 0x310, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0xa}, [@generic="210caf850ebf7fbac079f70ea868f799a53f946f4fc96375ae387af3ce945c4dff3a5844f0f3b059729419e552861fff65c0bf2d53da328aef6405ba172fbb12b85ffc9955183d66148f2310227cf07960ec1324c0f717e7f8cce073faaeb118dec59a07d87a418ba1ce0c1c0831bdf5c450f383777e6b157bc75a9c26102e8f6c8c2130b5bbaba4e37215ebe8e962d39f6ec8fd416b0dcd83c2d39caaf6de0c481dd90fd9fcefbb416184e117b27fd270c84d7ac2c9cbb2cc3e83e1705a84a18aca64239eefd3da963db3f31895909723de244d2c650af5a76645f88493236c050e165d02d5882db8998428bbfe487277e064c982f034", @nested={0x58, 0x51, [@generic="d097cdc075e45d1d6b68f9abaf2aea81c379299a56b71e363df3eb3e41d38ed0e9d1c77bc5b95dc370f1dc9a497785f671bbd7c73082ca85c8b860cbff4a9a36651d2c1d9117784697752a14fc76605d7da0a659"]}, @nested={0x4, 0x6a}, @generic="0b043172ef5b66a0d81a5fee903b5d3486d87bc14268486df83f20dfbd805c49a0cecad452c02e7a42f16b0d2e69a1056274e353fdca3ee336f2c0176832229db86c657bfdc712e8aef6be2057351f5a79bf25604862b10f10f6c1d83b53b4babe1d350d8f5af7fb7925f3339ace17a875f1d6b1ec3cedb724b41b279e910595e04c68688dc3c27a40c886c955f541f5021e9d69a3", @typed={0x8, 0x79, @ipv4=@local}, @nested={0xac, 0x8, [@generic="10ca6737df866a3b23c82633b8458ed2e18e6df2867cc7b38fcb73b63f9d3e2c77beba12e21f89a663879db8c0d4807c1a0e99340f4f0d2d33f39ccaef6546425fe0b9c469a1db824d7f4e461ab490ae6f6c4c20acfb6e1cfd5a67d24340753d2dfc161d68c5255e6f7adfab6a4f353435685f29e8804d283732ed565c4e9bf4183e869f7caeb023d358ba39587b46aafd04246d2a02f61da0daf7e220db6160276b21047b56"]}]}, 0x2b0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) dup(r3) 03:51:05 executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000000c0)={{{@in=@dev, @in6=@mcast2}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f00000001c0)=0xe8) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) write$tun(r2, &(0x7f0000000000)={@void, @void, @x25={0x0, 0x7, 0x0, "b55fbfbcffcc632095b9230127d6a08787ba96668f4600ed1aec2a61606c711fd5cfe72e051af2f1dadfca274fbb6258dbc926e848b35b17d6b919e3af32702ab254319b0224590efd5f64e7ab5e236379b14c17d3a82dbe8572dafb3722d250e4c4c8293f225f2f903f363ce9907fc48c867999d9d2fe61b8080ea7303e2238e4bc261abe72724f0df533a43720f9a71a1c760b2dbfe84698b11ef17a7e69286b3eeaab39aef726"}}, 0xab) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) restart_syscall() 03:51:05 executing program 0: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000)='/dev/urandom\x00', 0x0, 0x0) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000d00)) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="29aff511c3d0053e77da1162e7c64243b9af7e1327f74e9fd94326c3d0507c8d2e77c377f961ada906847777fa03ff86710464390f77b6e3c961c161414773938462e55dc8619ef0ecb90447b3666917b33c490e6330402c0407897eda175123417b365fb12431171cdba307d19024651311de2858635e4d224943781630bfe99b519ed0123e8b174251acb4f4952612369c7678eb581939ba0a1f4240fc9834addaedc299d8232754692b25f6ec3d17d6d0bed64feca01b9cac85f9953a7640ad79320a0287140da3f2d2e04fb3ba4ef1bb30a6f627e37e210935df127ec3a3006e89a9da36a904c126bc0b25fc9cc952d5672475340ea7a8721635614c9e36") r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r1, 0x80045530, &(0x7f0000000cc0)=""/32) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$RTC_PIE_ON(r2, 0x7005) write$binfmt_elf32(r2, &(0x7f0000000140)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x5, 0x100000001, 0xe599, 0x80000000, 0x3, 0x3, 0x0, 0xde, 0x38, 0x3b0, 0x8, 0x4, 0x20, 0x1, 0x401, 0x8, 0xffff}, [{0x7, 0x80, 0x80000000, 0x0, 0x9, 0x81, 0x0, 0x5c300000000000}, {0x6474e555, 0x0, 0x8001, 0xab, 0xcbb8, 0x9, 0x0, 0x1}], "a557fa85022e000141d2b79ed1de08939adb2759d7556d7b396024779b009ed425944928dd02f6daecaca7612b940ea3befae0e9fe096e67bc239d9af9bb6ddd04aa7182148a5d59f135c266e488856f42d2db3ba73bf49d45983eda5525eb16a34abee4e88e5baafdd0cee0ebf795bca23ff7dac90cc317412d26664a994efa65aef4cb93660c7275b888d8c902eb3a3c90e97d0006e4491436f2964ceea4fb426805a97087168a72fa7d7da5835f5a4a7d60740071d8bd11a7694405cfafb6b30cf83b372ed8db46b1debd", [[], [], [], [], [], [], [], [], [], []]}, 0xb44) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r2, 0x80045530, &(0x7f0000000d00)) ioctl$sock_bt_bnep_BNEPCONNDEL(r2, 0x400442c9, &(0x7f0000000d40)={0x9, @local}) 03:51:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) setsockopt$inet6_tcp_int(r0, 0x6, 0x3c, &(0x7f0000000000)=0x6, 0x4) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000080)=ANY=[]) 03:51:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:05 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) write(r0, &(0x7f0000000000)="a4d8a6649406ee8adfb63f281eda03c0fe76595fa2ad8084a3426d1b0254e2717096eac3b7845cf0089a1b1a1d2b9e0e2b4f8a7140172bca822f057cc0cc2f3bcbdfd0c7acd32bdcaf47fdad19367eec77e50548f886452749012f359800f99200d2ee8a9d890bf3c766bf286c661459b4569c69699f48c17b52fdaaff59d7aa85742d62f4ce0a16a523249af728761b3153d7bc1c23d79f14dee7fd0a6e085078260606b6de130989e41fa6d2b12d8fd7f2595b80c496c47e6856", 0xbb) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) write$binfmt_elf32(r1, &(0x7f00000000c0)={{0x7f, 0x45, 0x4c, 0x46, 0x20, 0x3, 0x3, 0x200, 0x401, 0x2, 0x3, 0x1ae7, 0x3d1, 0x38, 0x367, 0x3, 0x3, 0x20, 0x1, 0x4, 0x0, 0x200}, [{0x1, 0xe077, 0x1, 0x4, 0x4, 0xffffffffffffff69, 0x3, 0x4}, {0x6474e557, 0x7, 0xffffffff80000001, 0x7, 0x1, 0x2, 0x7, 0x200}], "961e1874cefa7a8c9d541d90244877d2f08e674e74d7002fd913fef21642e1642bd085901b306e097c0b593308d52604", [[], []]}, 0x2a8) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'tunl0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000400)=r2) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000080)) 03:51:06 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:06 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:06 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0xe00000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:06 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x40049409, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:06 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:06 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0xfffffffe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0xffffffff, 0xfff}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) r2 = gettid() ptrace$setopts(0xffffffffffffffff, r2, 0x0, 0x8) 03:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000005c0)=@broute={'broute\x00', 0x20, 0x4, 0x510, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000080], 0x0, &(0x7f0000000040), &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x40, 0x1, 'veth0_to_bond\x00', 'bridge_slave_1\x00', 'veth0_to_bond\x00', 'veth0\x00', @random="2ccd46172274", [0x0, 0xff, 0xff, 0x0, 0xff, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, [0x0, 0x0, 0xff, 0xff, 0x0, 0xff], 0x70, 0x70, 0xe8}}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x7, 0x1, 0x3, 0x1, 0x0, "e175aaefb9769d09e5dda9a18d973799e9cf860a72e5aba2f5832724af593cd3cc8efdbd1dc936fc50bd68cd12079b6cae99e96893e1717ab8ab85aa0e801f23"}}}}, {{{0x11, 0x0, 0x8808, 'team0\x00', 'vcan0\x00', 'ip6gre0\x00', 'veth1\x00', @random="2c89c2ba6ec9", [0x0, 0xff, 0x0, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0x0, 0x0, 0x3360168ca93cb8b4], 0x70, 0xa0, 0xe8}, [@common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x7, 0x1, 0x10001}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{{{0x3, 0x4, 0x890d, 'veth0_to_bridge\x00', 'vcan0\x00', 'team_slave_0\x00', 'tunl0\x00', @random="dd5009c55ff3", [0x0, 0xff, 0xff, 0xff], @local, [0xff, 0xff, 0xff], 0xc0, 0xf0, 0x120, [@ipvs={'ipvs\x00', 0x28, {{@ipv6=@dev={0xfe, 0x80, [], 0x12}, [0xffffffff, 0xffffffff, 0xff000000, 0xff000000], 0x4e20, 0x87, 0x7, 0x4e22, 0x3, 0x10}}}]}, [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x1}}}]}, @common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}}, {{{0x9, 0xf9a81da710b23a9f, 0x201, 'syzkaller1\x00', 'ip6gretap0\x00', 'team_slave_0\x00', 'bond0\x00', @broadcast, [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @local, [0x0, 0x0, 0x0, 0xff, 0xff], 0x70, 0xe8, 0x160}, [@common=@nflog={'nflog\x00', 0x50, {{0x8001, 0x7fff, 0x80000001, 0x0, 0x0, "07b73d3a22db4c3b6e57bab821f25fb29e55633f62793f7ad507116b11370c4f73c719e94dc5993e5d4410c0be29cb81a1d86397f9c00e92b5d4c21e49fe4bd0"}}}]}, @common=@nflog={'nflog\x00', 0x50, {{0x0, 0x9, 0x4, 0x0, 0x0, "16ff20ec7b447e6c6f4888b45917c1543d395918bc1ae06566a8cbad40c0dcb047a8fa1e98132b030dd785ffc8d7b10aa5b00454b86c535ee754405ab8dbe6dd"}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}]}, 0x588) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:06 executing program 0: r0 = memfd_create(&(0x7f0000000000)='bdev+[em0vmnet1\x00', 0x2) setsockopt$inet_udp_int(r0, 0x11, 0x66, &(0x7f0000000040)=0xbce8, 0x4) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) r3 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x0) pipe(&(0x7f00000000c0)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$LOOP_SET_DIRECT_IO(r3, 0x1268, 0x70d000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) fcntl$setpipe(r2, 0x407, 0x4) 03:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) poll(&(0x7f0000000000)=[{r0, 0x8000}, {r1, 0x100}, {r1, 0x200}, {r0, 0x20}, {r0, 0xd3}, {r0, 0x8}, {r0, 0x86}, {r1}, {r0, 0x8400}, {r0}], 0xa, 0x6d1deb78) 03:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) pkey_alloc(0x0, 0x3) 03:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) dup3(r0, r1, 0x80000) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x4, 0x3, 0x0, 0x1, 0xffffffffffff5603, 0x1700, 0x1200000000000}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 03:51:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:06 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0xa6, "9edb4fa472286c17a9bfa519b2476902afd6dde88d6a869916259391498604ad3f83eabc964a8cf86b874a12fda9eb3a0ad61c21d9473e8e89cc1a42358c104abd7168f48b13f4c6696acd1db8c6cd795d9b168f72ce32bc413edb29c6a677a1cb4b3f190d87489ebd1638cf78f323d0be15c4c36caf57096806c52354413d87fab9d08616ee1586b5e6b592533d6c32ef266ca123cd5d6c0f06e2b2a53a1c61708a09697caf"}, &(0x7f00000000c0)=0xae) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e24, 0xffffffff, @dev={0xfe, 0x80, [], 0x1a}, 0x9}}, 0x6, 0xc5d1, 0xfff, 0xfffffffffffffff7, 0x10000}, &(0x7f00000001c0)=0x98) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:06 executing program 0: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x200, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={0x0, 0x3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000004c0)={r1, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [], @multicast2}, 0x100}}, 0x7, 0x1ff, 0x8, 0x101, 0x8}, 0x98) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000580)={r1, 0xffffffffffffffff, 0x9, 0x7, 0x7, 0x10000, 0x7, 0x81, {r1, @in6={{0xa, 0x4e24, 0x400, @mcast2, 0x6}}, 0xff, 0x1, 0x1, 0x200, 0x82}}, &(0x7f0000000640)=0xb0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000680)={0xaa, 0x1}) getpeername$packet(r0, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) r3 = dup(r2) ioctl$KVM_GET_REG_LIST(r3, 0x400452c9, &(0x7f0000000b40)=ANY=[@ANYRESOCT=r3, @ANYRES16=r3, @ANYPTR, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESOCT=r3, @ANYRES32=r3, @ANYRES64=r2, @ANYRESDEC=r2, @ANYRES32=r3, @ANYPTR=&(0x7f00000000c0)=ANY=[@ANYRES16=r2, @ANYPTR64, @ANYRESOCT, @ANYBLOB="152e4e69e8be6e7bd02ad021ba0a28f9cbbd7431e0f4b99135c97650a7d5b08f920be6c226574ccf1bd6ae6008cbd346c2574dc3b76ed3c6dec55dae4b0ae802e0e24a784e889957c2db55db848dd138b294e9958eb928dfcc2113913703924a62e3254a6a47ea2fa5c30ad7227417af5df7793954f5e737c1d32033bc9cbc805380c7c3819fe847cd980429cc60034fd84d7398228b4ca0ea67ed89d73aa6ebe729b85fa3709cf8bc4b95b33e899bc37c511d167e274c473e0e9318f756f98ebffc5175abef28dca2d7031e913fc2bfdebeadd735b675a7d90a32b1edc3ee4c48047b221d7e66b26e4b557c159539446175781a4b992c", @ANYPTR64], @ANYPTR=&(0x7f0000000200)=ANY=[@ANYPTR, @ANYRES32=r2, @ANYBLOB="48883ac350fd4313c76bda5f1160370629ff095063ba236563154b370ee56bc2e0e79f9ead196664c1bf42c93bfe3e4b98d872c1748aafac3dfbb2da010d68d0211a30e074338b349753887af86f0cdfd1205b6f1bd8c641241cc4aaff71dfa1b6d1cb072ce9ae58ddd988f16df265ad7d7640ef807c3f16ff2ba42461e30671aeae053b30bb4a4b0e8bb30fc2059eaa668ebe6f635068e56e8b98770a8ad0f1033fc4ba26024e9aa65542f091bf25c7c5dd3543464f84c59f8ad8020704cb117a8ab370feb9849879c6ec2b0b57585e9463f8", @ANYPTR64, @ANYPTR64], @ANYRESDEC, @ANYBLOB="1951433f60679d91530a792d20a4dc5db953fda93241005ce19089ef07e7fc4a5e8edbfae9dde3a5fa5b2c549dcc516c63f5ad6cb21b276afae0b62e50e2ddb61151eea5444216193b881333b46d7583c777123fc989b32049caa8efe94d20ee1a784d4250e04d22bacb7279bd0586845951af0e2a1a67a24fb9d52bac82d6e3e12e7a5ba24a2c90d5e3ef3befd939dbe0659933ec9b4158d3be5fe76fe46fb3934ab27c984def4f8847135dc183f2e71852da388d7362ea7cc5334def6dfe87108e3802286a134be7de391e201f810c9944f9d1d061d74c5d06e0e50939683a", @ANYRESHEX=r2], @ANYRES32=r3, @ANYRESDEC=0x0, @ANYRESHEX=r2, @ANYRESOCT=r3, @ANYBLOB="4cac0240b008b35cb182e92c993748ee6b64e6638041060b93371ae7577a64f3aee6b43b46048627e81e47a24580d38a485abe37801e2939206df2dee28aee5ac279ff35850e0f9b84ff50e973f5686de89676b15c86d569666d94f060595d9885ec12290256e3cb1ff3eb3bfbca9cd78dc0fbb6e3b96efaa65a9fa98487375a21bb5b80c3c71920e33542cda9604e778e8fee0664cdcddc09", @ANYPTR=&(0x7f0000000480)=ANY=[@ANYRESOCT=r2]]) 03:51:07 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:07 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0045878, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:07 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0xffffffff00000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:07 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x40000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000000)=0x3000) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_FPU(r1, 0x41a0ae8d, &(0x7f0000000040)={[], 0x400, 0x15, 0x8001, 0x0, 0x3f, 0xd004, 0x3000, [], 0x6}) 03:51:07 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x100000000, 0xbdaa1ccafeb5a88b) dup(r0) 03:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000540)='/dev/vcs#\x00', 0x3, 0x40000) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000580)={'nat\x00'}, &(0x7f0000000600)=0x78) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) write$binfmt_aout(r0, &(0x7f0000000000)={{0xcc, 0x8000, 0x1000, 0x3dd, 0x1a9, 0x1, 0xf3, 0x3}, "c91d415d55be6ae612b3f932e0ebba", [[], [], [], [], []]}, 0x52f) 03:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000000)) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x8766, 0x4) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000)={0x7}, 0x4) 03:51:07 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_REG_LIST(r0, 0x400452c9, &(0x7f0000000000)=ANY=[]) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@int=0x8, 0x4) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x80000000, 0x7, 0x6, 0x6, 0x6, 0x8}}, 0x8) accept4$unix(r0, 0x0, &(0x7f00000000c0), 0x80800) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x2, 0x1, 0x7, 0xc83, 0x7}) 03:51:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r2 = gettid() kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f0000000100)={r0, r0, 0x9}) r3 = dup(r0) open(&(0x7f0000000040)='./file0\x00', 0x400000, 0x20) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000000)='bond0\x00') ioctl$KVM_GET_REG_LIST(r3, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:07 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:07 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:07 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x840, 0x48) ioctl$EVIOCGABS20(r1, 0x80184560, &(0x7f0000000100)=""/50) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_tcp_buf(r2, 0x6, 0x0, &(0x7f0000000000)=""/81, &(0x7f0000000080)=0x51) 03:51:08 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0189436, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0xfeffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:08 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0xe00, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000040)=ANY=[@ANYBLOB="2658699229c8eebd1dddb2a453040cbf8a7b7229461e9000ad0769164c6594caa552e2319c0b3062fa54410b92c1e49b1df21ee4429b796e47fed22ca17ceeb471efd067af0daeb8744073a7a1c2acb73f982264da2308a01c0dd3c285fe3e38690a3e0e070add225fe46336adfebe19", @ANYRESHEX, @ANYRESOCT=r0, @ANYBLOB="23a090406108b11a878417622a2751c4fe622031aeee477388ab3a44f8378fcef7f8a3cb9054689ff8a0f1bbd2f9a973e68d84d7632e94fd2821251ce55bd5322deb5a7b19cc0c7eed3ebd096345a69128e2d557d733a35273cbb559afa6fc3721291cfd9d1ab032d6c4812ae779d366b4692450550c327a9f22a97f9dfc946060e1dbcd3f3c3a760212b1f9b90c0157f3d7e5ae6560b83f8b9b67491e04ae138d3bb374454b3fb53af9c8da", @ANYRES32=0x0, @ANYRESOCT=0x0]) 03:51:08 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) bind$bt_sco(r1, &(0x7f0000000000)={0x1f, {0x81, 0x2, 0x8001, 0x100, 0x401, 0x10000}}, 0x8) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) write$nbd(r1, &(0x7f0000000000)={0x67446698, 0x0, 0x0, 0x3, 0x1, "f70a725e4d6a55d41d9176db3c0b77f67d7b9575b8204629911f7455aba686153146ff50e58a8bcaa52c3fe4f39cd24fa4ba773997a81e82200bf5679231d0949aafe45d6fb65f0110e94d71ebcbd85445a54d78b89cebf598df17a671f9f4dcafe50669c42fc808c77270bc68ec4f7bf3deefd4d226828d558eabdcc9040636c4ae79fafa2ffa39487006abaa7a509a6b30fa307d"}, 0xa5) syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x200, 0x800) 03:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) fstat(r0, &(0x7f0000000100)) socketpair(0x8, 0x5, 0x1, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r2, 0x84, 0x66, &(0x7f0000000180)={0x0, 0x20}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000200)={r3, 0x1, 0x30, 0x100000000, 0x8}, &(0x7f0000000240)=0x18) ioctl$SIOCGIFHWADDR(r1, 0x8927, &(0x7f00000000c0)) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000280)='team_slave_0\x00') fcntl$getownex(r2, 0x10, &(0x7f0000000040)={0x0, 0x0}) write$FUSE_LK(r1, &(0x7f0000000080)={0x28, 0xffffffffffffffda, 0x2, {{0x9, 0x401, 0x1, r4}}}, 0x28) 03:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0x5, 0x400000) syz_open_pts(r1, 0x40) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$RTC_PIE_ON(r2, 0x7005) 03:51:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='pids.events\x00', 0x0, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e24, 0x100, @dev={0xfe, 0x80, [], 0x1d}, 0x7fffffff}, 0x1c) fcntl$F_GET_FILE_RW_HINT(r2, 0x40d, &(0x7f0000000040)) 03:51:08 executing program 0: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) preadv(r0, &(0x7f00000014c0)=[{&(0x7f0000000000)=""/251, 0xfb}, {&(0x7f0000000100)=""/233, 0xe9}, {&(0x7f0000000200)=""/240, 0xf0}, {&(0x7f0000000300)=""/226, 0xe2}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/134, 0x86}], 0x6, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) setsockopt$inet_tcp_buf(r0, 0x6, 0x1f, &(0x7f0000001540)="e8e37f93dbc788df9c1c7518a8a0f7475aed0a4efef2199bd8d449e2e68fc4ac449f414c4c05ec8abadf4af8aafbb9664df7e1b183e4b9b7ed6ec5f6d454cd2862830b409a10cc961d366ee67e85851c88dd78708046fae69b2e562d5bd863fa399cc6b4dfe8a41f107c1ed4291d6ebc3a976488b9543bfa6e6fda02627312bf9469cc128750db5408216e22cd880581f0a71c43fd78aec111c7168679dd2024026f844989d7067240d9336bf1904ae8ccbcf98de2ca83f03c45c98d1f1bdcee542f9eea61368bbb82e0aafbe88dda38083df898ecc4fec71e7c13cf09b3028617854c98419371", 0xe7) 03:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = memfd_create(&(0x7f0000000000)=':,)/wlan1[\x00', 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040), 0x106, 0x6}}, 0x20) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:08 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:08 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:08 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x240800, 0x0) ioctl$VT_DISALLOCATE(r1, 0x5608) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:08 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x8700000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:09 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0xe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:09 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x5421, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000080)="85f2e086082f35bc463187f438d4996bda8ae4881d123819e7453d566c51f5aa17f804097935325f5a7671a320b053d373f79427e9188fcce0981a3da7c710fc1a160052e752257c14806d314720c456a133aeb4153d") 03:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x8040, 0x0) ioctl$PERF_EVENT_IOC_DISABLE(r1, 0x2401, 0x55c2) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) mincore(&(0x7f0000ffb000/0x3000)=nil, 0x3000, &(0x7f0000000000)=""/155) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f00000000c0)) 03:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0x400452c9, &(0x7f0000000000)=ANY=[]) signalfd4(r0, &(0x7f0000000200)={0x2}, 0x8, 0x80800) recvfrom$llc(r0, &(0x7f00000000c0)=""/235, 0xeb, 0x20, &(0x7f00000001c0)={0x1a, 0x30d, 0xe7, 0x7, 0x100000000, 0x0, @broadcast}, 0x10) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101000, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) utimensat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={{}, {0x0, 0x7530}}, 0x7a1455c0efe76cd0) 03:51:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:09 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:09 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:09 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x4000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:09 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:09 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0x4020940d, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:09 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x1f00, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:09 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x181080, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x8, &(0x7f0000000080)={0x3f}, 0x8) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, &(0x7f0000000000)=0x1f, 0x4) 03:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r1, 0x800455d1, &(0x7f0000000000)) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:10 executing program 0: times(&(0x7f0000000000)) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffc000/0x3000)=nil, 0x3000}, 0x1}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/conntrack\x00', 0x2, 0x0) getsockopt$inet6_mreq(r2, 0x29, 0x1f, &(0x7f0000000080)={@remote}, &(0x7f00000000c0)=0x14) 03:51:10 executing program 0: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req={0x3, 0xda4, 0x3, 0x18e}, 0x10) dup(r0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:10 executing program 0: openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x600001, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_CHECK_EXTENSION(r1, 0xae03, 0x2) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) sendto$inet(r1, &(0x7f00000000c0)="87c9129cd3c91c2ebdf8b80fd5f5bd50639ded897981f76305378af1156d444dd2479503575e80571b7eadc0fbdf3aa6093519922203604643826be7343efec56c3820cef5925ec34a429f83a25246ab1dc79c7630e4de818632b3490d8636525c8d7075f2c91d4c3ed709e7a864b06a29ad37734805530aaafc522d6fb6afad78", 0x81, 0x0, &(0x7f0000000180)={0x2, 0x4e22, @loopback}, 0x10) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000000000)={{0xa, 0x4e23, 0xef3, @loopback, 0x8}, {0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, [], 0xd}, 0x3}, 0x5, [0x0, 0x81, 0x102, 0x8000, 0x8, 0x1, 0x7f, 0x101]}, 0x5c) 03:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000000)={0x1, r1, 0x1}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e22, 0x57cc, @mcast2}, @in6={0xa, 0x4e23, 0x1f, @mcast2, 0x6}, @in6={0xa, 0x4e23, 0x3, @remote, 0x1}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0x5, @mcast1, 0x6}], 0x80) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20000, 0x0) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$RTC_PIE_ON(r2, 0x7005) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/123) r3 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x7, 0x0) connect$llc(r3, &(0x7f0000000080)={0x1a, 0xfffe, 0x10001, 0x2, 0x8, 0x1ff, @dev={[], 0x14}}, 0x10) 03:51:10 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:10 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0xfffffffe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:10 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:10 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x4000000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:10 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0xe000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) r2 = shmget$private(0x0, 0x2000, 0x800, &(0x7f0000ffe000/0x2000)=nil) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000000)={{{@in6=@mcast1, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@rand_addr}, 0x0, @in=@rand_addr}}, &(0x7f0000000100)=0xe8) getresgid(&(0x7f0000000140), &(0x7f0000000180), &(0x7f00000001c0)=0x0) getresuid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000280)=0x0) r6 = getegid() ioctl$KVM_SET_NESTED_STATE(r1, 0x4080aebf, &(0x7f00000003c0)={0x2, 0x0, 0x2080, {0x7000, 0x13000}, [], "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", "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"}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f00000002c0)={0x0}, &(0x7f0000000300)=0xc) r8 = getpgrp(0x0) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000340)={{0x1, r3, r4, r5, r6, 0x2, 0xb86}, 0x0, 0x3, 0x0, 0x9d1, r7, r8, 0x1ead}) 03:51:10 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:10 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x2, 0x3}, 0x8) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$EVIOCSREP(r1, 0x40084503, &(0x7f0000000040)=[0x100, 0x7264]) lseek(r1, 0x0, 0x6) 03:51:10 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x200, 0x0) setsockopt$inet6_MRT6_DEL_MFC_PROXY(r0, 0x29, 0xd3, &(0x7f0000000080)={{0xa, 0x4e23, 0x6, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x1d}}, 0x401}, {0xa, 0x4e21, 0x1, @empty, 0x3}, 0x7fff, [0xfff, 0x8, 0x4, 0x1, 0x50e9, 0x700000000000, 0x100000001]}, 0x5c) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0xfffffffffffffff8, 0x1a1000) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000140)=0x92d, 0x4) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000040)={0x18, 0x4, 0x7}) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000180)={0x4000000000000000, 0x4000, 0xfffffffffffff000, 0x1, 0x1b}) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:10 executing program 0: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x1, 0x0) r1 = socket$inet6(0xa, 0x6, 0x1ff) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) r2 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r3 = dup(r2) ioctl$KVM_GET_REG_LIST(r3, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) fstat(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)=0x0) setregid(r2, r3) [ 574.765979] Unknown ioctl 1074310812 [ 574.770150] Unknown ioctl 1077980830 [ 574.774615] Unknown ioctl 1074025161 [ 574.781081] Unknown ioctl 1077980830 [ 574.785084] Unknown ioctl 1074310812 [ 574.789423] Unknown ioctl 1074025161 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x24) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000080)={r2, 0x20}, 0x8) 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000000)=""/182) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0xb, 0x9, 0x5e, 0x7fff, 0x7, 0x1, 0x3}, 0x2c) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f0000000040)={0x0, @aes256, 0x1, "fe71033f70cad660"}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) r2 = getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f0000000080)={{0x0, 0x5, 0x0, 0x7, 'syz0\x00', 0x8}, 0x6, 0x20000000, 0x8, r2, 0x9, 0x10001, 'syz0\x00', &(0x7f0000000000)=['$@\x00', '%\x00', '\x00', ':\x00', 'em0eth1vboxnet0ð1posix_acl_accesseth1trustedem0]\x00', 'wlan0keyring\x00', '\x00', 'system\x00', '\x00'], 0x52, [], [0x0, 0x6, 0x8c2, 0x4]}) 03:51:11 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x4000000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:11 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:11 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x40000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:11 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x4000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x101100, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x1f, &(0x7f0000000040)="75720f75f511b2a13fb2c25de03fbeb784d46c51db534b9260f4d51a078381dfa485b93be0ce40e07cafe6d98145ee975d4efaf5073c8bc3a72c707dbd34c94045decc", 0x43) r3 = dup(r0) ioctl$KVM_GET_REG_LIST(r3, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000180)={r0, 0x0, 0x7000000000000000, 0x20, 0x6}) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000100)={'icmp\x00'}, &(0x7f0000000140)=0x1e) 03:51:11 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:11 executing program 0: socketpair$inet_dccp(0x2, 0x6, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f0000000080)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r2 = dup(r1) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000000)={0x81, 0x9, 0x68, 0x8, "68df4990fd3ad0b023ec3465fd1aa6e6f704b6ff5dae9138dd83b3164ee0b7fd"}) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) fcntl$dupfd(r0, 0x0, r1) 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={'ifb0\x00', {0x2, 0x4e21, @multicast1}}) 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) mknod$loop(&(0x7f0000000000)='./file0\x00', 0xe001, 0x1) 03:51:11 executing program 0: r0 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x101801) dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000b00)={0x0, 0x0, 0x0, 'queue1\x00'}) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000200)={0x0, @remote, 0x4e21, 0x3, 'sed\x00'}, 0x2c) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000240)={'nat\x00', 0x16, "fc14afd171117203912a38cf776606920725631e5d4a"}, &(0x7f00000000c0)=0x3a) write$P9_RREADLINK(r0, &(0x7f0000000080)={0x10, 0x17, 0x0, {0x7, './file0'}}, 0x1c5) write$sndseq(r0, &(0x7f0000000080), 0x100000380) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) fsetxattr$trusted_overlay_redirect(r2, &(0x7f0000000340)='trusted.overlay.redirect\x00', &(0x7f00000003c0)='./file0\x00', 0x8, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000040)={0x0, @in={{0x2, 0x4e22, @local}}, 0x3, 0x100000001, 0x8, 0x9, 0x80}, &(0x7f0000000100)=0x98) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x6, 0x7, 0x8, 0x7, 0xffff00, 0x10000, 0x1, 0x10000, r3}, &(0x7f0000000180)=0x20) r4 = syz_open_dev$sndpcmc(&(0x7f0000000380)='/dev/snd/pcmC#D#c\x00', 0x7, 0x0) r5 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000440)='/dev/qat_adf_ctl\x00', 0x200, 0x0) getdents(r2, &(0x7f00000004c0)=""/229, 0xe5) ioctl$VHOST_SET_VRING_CALL(r4, 0x4008af21, &(0x7f0000000480)={0x3, r5}) renameat2(r4, &(0x7f00000005c0)='./file0\x00', r5, &(0x7f0000000600)='./file1\x00', 0x1) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r3, 0x47}, &(0x7f0000000200)=0x8) r6 = dup(r2) openat$cgroup_ro(r6, &(0x7f0000000400)='hugetlb.2MB.usage_in_bytes\x00', 0x0, 0x0) ioctl$KVM_GET_REG_LIST(r6, 0x400452c9, &(0x7f0000000000)=ANY=[]) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x8008, &(0x7f00000002c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00', @ANYRESHEX=r2, @ANYBLOB=',access=user,\x00']) 03:51:11 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x5, 0x50080) sendto$inet6(r1, &(0x7f00000000c0)="615e0530ef14a292961108ce61", 0xd, 0x40000, &(0x7f0000000100)={0xa, 0x4e24, 0xe8, @mcast2, 0x8}, 0x1c) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{}, {0x0, 0x0, 0x0, @remote}]}) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000000)=0x1) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES64=r0]) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000080)={0xa}, 0xffd0) r2 = getpid() fcntl$setown(r0, 0x8, r2) 03:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) 03:51:12 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:12 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0xe00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) syncfs(r0) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:12 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:12 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x4000000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:12 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x4000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) creat(&(0x7f0000000000)='./file0\x00', 0x40) ioctl$UI_DEV_CREATE(r1, 0x5501) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:12 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) r2 = gettid() ptrace$getregs(0xe, r2, 0x7, &(0x7f0000000000)=""/167) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:12 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0400000000000000ac050000000000000010000000000000b80000000000000090ffffffffffffff"]) openat(r1, &(0x7f0000000000)='./file0\x00', 0x10000, 0x40) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:12 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:13 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:13 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0xffffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:13 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:13 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x40000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:13 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:13 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0xfeffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:13 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:13 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x181080, 0x0) epoll_pwait(r1, &(0x7f0000000040)=[{}], 0x1, 0x8, &(0x7f0000000080)={0x3f}, 0x8) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:13 executing program 0: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0189436, &(0x7f0000000540)={0x0, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:14 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:14 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x87000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:14 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:14 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x4000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:14 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:14 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:14 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0xe00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:14 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:15 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:15 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0xe, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:15 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:15 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x4000000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:15 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x4, 0x3, 0x0, 0x1, 0xffffffffffff5603, 0x1700, 0x1200000000000}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 03:51:15 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:15 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0xffffffff00000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x4, 0x3, 0x0, 0x1, 0xffffffffffff5603, 0x1700, 0x1200000000000}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 03:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x4, 0x3, 0x0, 0x1, 0xffffffffffff5603, 0x1700, 0x1200000000000}, &(0x7f0000000080)=0x20) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000380), &(0x7f00000003c0)=0x4) 03:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x4, 0x3, 0x0, 0x1, 0xffffffffffff5603, 0x1700, 0x1200000000000}, &(0x7f0000000080)=0x20) 03:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x4, 0x3, 0x0, 0x1, 0xffffffffffff5603, 0x1700, 0x1200000000000}, &(0x7f0000000080)=0x20) 03:51:15 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) 03:51:16 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:16 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0xe000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) 03:51:16 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) 03:51:16 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:16 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) 03:51:16 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:16 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x1f00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 03:51:16 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 03:51:17 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 03:51:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0xfeffffff, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:17 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 03:51:17 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 580.961719] 9pnet: Insufficient options for proto=fd 03:51:17 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) [ 581.070966] 9pnet: Insufficient options for proto=fd 03:51:17 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:17 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x1f000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno'}}) 03:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) [ 581.206993] 9pnet: Insufficient options for proto=fd 03:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 03:51:17 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) dup(r0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 03:51:17 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:17 executing program 0: syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:17 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:17 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:17 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x8700, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:18 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:18 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:18 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:18 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0xfeffffff, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x0, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 582.421265] 9pnet: Insufficient options for proto=fd [ 582.463141] 9pnet: Insufficient options for proto=fd 03:51:18 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 03:51:18 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x87, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 582.656419] 9pnet: Insufficient options for proto=fd 03:51:18 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:18 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 03:51:18 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 582.777438] 9pnet: Insufficient options for proto=fd 03:51:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 582.869512] 9pnet: Insufficient options for proto=fd 03:51:19 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:19 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:19 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 583.043152] 9pnet: Insufficient options for proto=fd 03:51:19 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x8700, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:19 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:19 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x40000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:19 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:19 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:19 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:20 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:20 executing program 0: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:20 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x1f00000000000000, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:20 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:20 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0xe00, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:20 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:20 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:20 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:20 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:21 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:21 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:21 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:21 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:21 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:21 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:21 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:21 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:21 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) 03:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) 03:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) 03:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x4, 0x3, 0x0, 0x1, 0xffffffffffff5603, 0x1700, 0x1200000000000}, &(0x7f0000000080)=0x20) 03:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e20, 0x8, @local, 0x7d}}, [0x3, 0x8, 0x0, 0x6, 0x7fffffff, 0x101, 0x92, 0x4, 0xffff, 0x3, 0x4, 0x8, 0x9, 0x52]}, &(0x7f00000000c0)=0x100) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000100)={r4, 0x14fb}, &(0x7f0000000180)=0xc) write$P9_RXATTRCREATE(r1, &(0x7f00000001c0)={0x7, 0x21, 0x2}, 0x7) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000040)={@empty, 0x4, 0x3, 0x0, 0x1, 0xffffffffffff5603, 0x1700, 0x1200000000000}, &(0x7f0000000080)=0x20) 03:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = dup(r0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'veth1_to_bond\x00', {0x2, 0x4e20, @multicast1}}) ioctl$KVM_GET_REG_LIST(r1, 0x400452c9, &(0x7f0000000000)=ANY=[]) bind$pptp(r1, &(0x7f0000000040)={0x18, 0x2, {0x2, @rand_addr=0x80}}, 0x1e) 03:51:22 executing program 0: r0 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x400020, 0x20000) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x1, 0x2}) r2 = dup(r0) ioctl$KVM_GET_REG_LIST(r2, 0x400452c9, &(0x7f0000000000)=ANY=[]) ioctl$RTC_WKALM_SET(r2, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x3c, 0x1, 0xc, 0xc, 0xa, 0xf77, 0x3, 0x13f, 0x1}}) 03:51:22 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x1f00000000000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:22 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:22 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:22 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:22 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:22 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:22 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:22 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:23 executing program 0: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0xffffffff00000000, 0x0, 'client1\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:23 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:23 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:23 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:23 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:23 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:23 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:23 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 'client1\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:24 executing program 0 (fault-call:3 fault-nth:0): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 587.921214] FAULT_INJECTION: forcing a failure. [ 587.921214] name failslab, interval 1, probability 0, space 0, times 0 [ 587.932695] CPU: 1 PID: 28460 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 587.941211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.950582] Call Trace: [ 587.953203] dump_stack+0x1c9/0x2b4 [ 587.956874] ? dump_stack_print_info.cold.2+0x52/0x52 [ 587.962109] should_fail.cold.4+0xa/0x11 [ 587.966210] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 587.971384] ? lock_downgrade+0x8f0/0x8f0 [ 587.975575] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 587.981132] ? proc_fail_nth_write+0x9e/0x210 [ 587.985634] ? find_held_lock+0x36/0x1c0 [ 587.989736] ? check_same_owner+0x340/0x340 [ 587.994074] ? __lock_is_held+0xb5/0x140 [ 587.998155] ? rcu_note_context_switch+0x680/0x680 [ 588.003131] __should_failslab+0x124/0x180 [ 588.007412] should_failslab+0x9/0x14 [ 588.011232] __kmalloc_track_caller+0x2ae/0x720 [ 588.015935] ? strncpy_from_user+0x510/0x510 [ 588.020400] ? strndup_user+0x77/0xd0 [ 588.024241] memdup_user+0x2c/0xa0 [ 588.027817] strndup_user+0x77/0xd0 [ 588.031481] ksys_mount+0x3c/0x140 [ 588.035057] __x64_sys_mount+0xbe/0x150 [ 588.039063] do_syscall_64+0x1b9/0x820 [ 588.042986] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 588.048405] ? syscall_return_slowpath+0x5e0/0x5e0 [ 588.053383] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.058258] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 588.063309] ? prepare_exit_to_usermode+0x291/0x3b0 [ 588.068389] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.073238] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 588.078437] RIP: 0033:0x457099 [ 588.081658] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 588.100585] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 588.108351] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 03:51:24 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, 'client1\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 588.115638] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 588.122927] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 588.130215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 588.137502] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000000 03:51:24 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:24 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:24 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:24 executing program 0 (fault-call:3 fault-nth:1): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:24 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 588.303536] FAULT_INJECTION: forcing a failure. [ 588.303536] name failslab, interval 1, probability 0, space 0, times 0 [ 588.314935] CPU: 1 PID: 28479 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 588.323448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.332825] Call Trace: [ 588.335447] dump_stack+0x1c9/0x2b4 [ 588.339080] ? dump_stack_print_info.cold.2+0x52/0x52 [ 588.344290] ? __kernel_text_address+0xd/0x40 [ 588.348842] ? unwind_get_return_address+0x61/0xa0 [ 588.353824] should_fail.cold.4+0xa/0x11 [ 588.357915] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 588.363053] ? kasan_kmalloc+0xc4/0xe0 [ 588.366958] ? __kmalloc_track_caller+0x14a/0x720 [ 588.371815] ? memdup_user+0x2c/0xa0 [ 588.375577] ? strndup_user+0x77/0xd0 [ 588.379414] ? graph_lock+0x170/0x170 [ 588.383242] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 588.388811] ? proc_fail_nth_write+0x9e/0x210 [ 588.393360] ? find_held_lock+0x36/0x1c0 [ 588.397473] ? check_same_owner+0x340/0x340 03:51:24 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 588.401827] ? lock_release+0x9f0/0x9f0 [ 588.405847] ? rcu_note_context_switch+0x680/0x680 [ 588.410811] ? __check_object_size+0xa3/0x5d7 [ 588.415369] __should_failslab+0x124/0x180 [ 588.419640] should_failslab+0x9/0x14 [ 588.423463] kmem_cache_alloc_trace+0x2b5/0x730 [ 588.428156] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 588.433728] ? _copy_from_user+0xdf/0x150 [ 588.437901] copy_mount_options+0x5f/0x380 [ 588.442175] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 588.447746] ksys_mount+0xd0/0x140 03:51:24 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 588.451313] __x64_sys_mount+0xbe/0x150 [ 588.455367] do_syscall_64+0x1b9/0x820 [ 588.459286] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 588.464681] ? syscall_return_slowpath+0x5e0/0x5e0 [ 588.469645] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 588.474697] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 588.479744] ? recalc_sigpending_tsk+0x180/0x180 [ 588.484532] ? kasan_check_write+0x14/0x20 [ 588.488789] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.493651] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 588.498872] RIP: 0033:0x457099 [ 588.502085] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 588.521000] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 588.528735] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 588.536018] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 588.543291] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 588.550596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 588.557875] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000001 03:51:24 executing program 0 (fault-call:3 fault-nth:2): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 588.651887] FAULT_INJECTION: forcing a failure. [ 588.651887] name failslab, interval 1, probability 0, space 0, times 0 [ 588.663515] CPU: 0 PID: 28500 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 588.672031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 588.681387] Call Trace: [ 588.684003] dump_stack+0x1c9/0x2b4 [ 588.687664] ? dump_stack_print_info.cold.2+0x52/0x52 [ 588.692895] should_fail.cold.4+0xa/0x11 [ 588.696970] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 588.702096] ? kasan_check_read+0x11/0x20 [ 588.706265] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 588.710944] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 588.715634] ? find_held_lock+0x36/0x1c0 [ 588.719748] ? check_same_owner+0x340/0x340 [ 588.724103] ? rcu_note_context_switch+0x680/0x680 [ 588.729047] ? copy_mount_options+0x5f/0x380 [ 588.733477] ? ksys_mount+0xd0/0x140 [ 588.737235] __should_failslab+0x124/0x180 [ 588.741489] should_failslab+0x9/0x14 [ 588.745309] kmem_cache_alloc+0x29c/0x710 [ 588.749534] ? find_held_lock+0x36/0x1c0 [ 588.753642] getname_flags+0xd0/0x5a0 [ 588.757502] user_path_at_empty+0x2d/0x50 [ 588.761708] do_mount+0x17f/0x1e30 [ 588.765270] ? rcu_is_watching+0x8c/0x150 [ 588.769430] ? trace_hardirqs_on+0xbd/0x2c0 [ 588.773881] ? copy_mount_string+0x40/0x40 [ 588.778161] ? copy_mount_options+0x5f/0x380 [ 588.782602] ? rcu_read_lock_sched_held+0x108/0x120 [ 588.787649] ? kmem_cache_alloc_trace+0x324/0x730 [ 588.792553] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 588.798133] ? _copy_from_user+0xdf/0x150 [ 588.802314] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 588.807961] ? copy_mount_options+0x285/0x380 [ 588.812467] ksys_mount+0x12d/0x140 [ 588.816102] __x64_sys_mount+0xbe/0x150 [ 588.820096] ? do_syscall_64+0xca/0x820 [ 588.824143] do_syscall_64+0x1b9/0x820 [ 588.828048] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 588.833433] ? syscall_return_slowpath+0x5e0/0x5e0 [ 588.838397] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 588.843449] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 588.848485] ? recalc_sigpending_tsk+0x180/0x180 [ 588.853247] ? kasan_check_write+0x14/0x20 [ 588.857538] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 588.862421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 588.867615] RIP: 0033:0x457099 [ 588.870826] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 588.889757] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:51:25 executing program 0 (fault-call:3 fault-nth:3): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 588.897495] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 588.904782] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 588.912078] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 588.919379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 588.926656] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000002 [ 588.981141] FAULT_INJECTION: forcing a failure. [ 588.981141] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 588.992986] CPU: 1 PID: 28508 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 589.001468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.010844] Call Trace: [ 589.013470] dump_stack+0x1c9/0x2b4 [ 589.017139] ? dump_stack_print_info.cold.2+0x52/0x52 [ 589.022397] should_fail.cold.4+0xa/0x11 [ 589.026501] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.031626] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 589.036505] ? mark_held_locks+0x160/0x160 [ 589.040771] ? graph_lock+0x170/0x170 [ 589.044600] ? kasan_check_write+0x14/0x20 [ 589.048888] ? find_held_lock+0x36/0x1c0 [ 589.052980] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 589.057832] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.063397] ? should_fail+0x246/0xd86 [ 589.067308] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.072462] __alloc_pages_nodemask+0x365/0xd10 [ 589.077165] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 589.081864] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 589.086909] ? find_held_lock+0x36/0x1c0 [ 589.091027] ? trace_hardirqs_off+0xb8/0x2b0 [ 589.095454] cache_grow_begin+0x91/0x710 [ 589.099546] kmem_cache_alloc+0x63a/0x710 [ 589.103727] ? __sched_text_start+0x8/0x8 [ 589.107893] getname_flags+0xd0/0x5a0 [ 589.111720] user_path_at_empty+0x2d/0x50 [ 589.115906] do_mount+0x17f/0x1e30 [ 589.119505] ? rcu_is_watching+0x8c/0x150 [ 589.123679] ? trace_hardirqs_on+0xbd/0x2c0 [ 589.128021] ? copy_mount_string+0x40/0x40 [ 589.132282] ? copy_mount_options+0x5f/0x380 [ 589.136727] ? rcu_read_lock_sched_held+0x108/0x120 [ 589.141777] ? kmem_cache_alloc_trace+0x324/0x730 [ 589.146645] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 589.152217] ? _copy_from_user+0xdf/0x150 [ 589.156390] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.161935] ? copy_mount_options+0x285/0x380 [ 589.166452] ksys_mount+0x12d/0x140 [ 589.170090] __x64_sys_mount+0xbe/0x150 [ 589.174071] do_syscall_64+0x1b9/0x820 [ 589.177987] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 589.183392] ? syscall_return_slowpath+0x5e0/0x5e0 [ 589.188362] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.193222] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 589.198273] ? prepare_exit_to_usermode+0x291/0x3b0 [ 589.203305] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.208188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.213390] RIP: 0033:0x457099 03:51:25 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 589.216590] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 589.235517] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.243225] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 589.250497] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 589.257782] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 589.265057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 589.272481] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000003 03:51:25 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:25 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:25 executing program 0 (fault-call:3 fault-nth:4): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:25 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:25 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 589.473017] FAULT_INJECTION: forcing a failure. [ 589.473017] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 589.484896] CPU: 0 PID: 28530 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 589.493418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.502777] Call Trace: [ 589.505418] dump_stack+0x1c9/0x2b4 [ 589.509089] ? dump_stack_print_info.cold.2+0x52/0x52 [ 589.514307] should_fail.cold.4+0xa/0x11 [ 589.518412] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.523542] ? mark_held_locks+0x160/0x160 [ 589.527809] ? perf_tp_event+0xc40/0xc40 [ 589.531928] ? memset+0x31/0x40 [ 589.535251] ? perf_trace_lock_acquire+0x4f9/0x9a0 [ 589.540212] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.545760] ? should_fail+0x246/0xd86 [ 589.549685] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.554850] __alloc_pages_nodemask+0x365/0xd10 [ 589.559550] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 589.564235] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 589.569390] ? find_held_lock+0x36/0x1c0 [ 589.573471] ? synproxy_recv_client_ack+0x3d8/0x1100 [ 589.578597] ? trace_hardirqs_off+0xb8/0x2b0 [ 589.583070] cache_grow_begin+0x91/0x710 [ 589.587160] kmem_cache_alloc+0x63a/0x710 [ 589.591376] getname_flags+0xd0/0x5a0 [ 589.595221] user_path_at_empty+0x2d/0x50 [ 589.599421] do_mount+0x17f/0x1e30 [ 589.602988] ? rcu_is_watching+0x8c/0x150 [ 589.607143] ? trace_hardirqs_on+0xbd/0x2c0 [ 589.611480] ? copy_mount_string+0x40/0x40 [ 589.615739] ? copy_mount_options+0x5f/0x380 [ 589.620180] ? rcu_read_lock_sched_held+0x108/0x120 [ 589.625218] ? kmem_cache_alloc_trace+0x324/0x730 [ 589.630073] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 589.635642] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 589.641200] ? copy_mount_options+0x285/0x380 [ 589.645723] ksys_mount+0x12d/0x140 [ 589.649391] __x64_sys_mount+0xbe/0x150 [ 589.653393] do_syscall_64+0x1b9/0x820 [ 589.657290] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 589.662749] ? syscall_return_slowpath+0x5e0/0x5e0 [ 589.667704] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 589.672752] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 589.677776] ? recalc_sigpending_tsk+0x180/0x180 [ 589.682539] ? kasan_check_write+0x14/0x20 [ 589.686781] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 589.691641] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.696848] RIP: 0033:0x457099 [ 589.700060] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:51:25 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 589.719240] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 589.727231] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 589.734519] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 589.741796] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 589.749096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 589.756395] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000004 03:51:26 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:26 executing program 0 (fault-call:3 fault-nth:5): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 589.908108] FAULT_INJECTION: forcing a failure. [ 589.908108] name failslab, interval 1, probability 0, space 0, times 0 [ 589.919509] CPU: 0 PID: 28561 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 589.928075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 589.937448] Call Trace: [ 589.940085] dump_stack+0x1c9/0x2b4 [ 589.943771] ? dump_stack_print_info.cold.2+0x52/0x52 [ 589.949002] should_fail.cold.4+0xa/0x11 [ 589.953101] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 589.958260] ? save_stack+0xa9/0xd0 [ 589.961932] ? save_stack+0x43/0xd0 [ 589.965605] ? kasan_kmalloc+0xc4/0xe0 [ 589.969522] ? vfs_new_fs_context+0x5b/0x720 [ 589.973940] ? do_mount+0x605/0x1e30 [ 589.977682] ? ksys_mount+0x12d/0x140 [ 589.981526] ? __x64_sys_mount+0xbe/0x150 [ 589.985721] ? do_syscall_64+0x1b9/0x820 [ 589.989830] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 589.995253] ? find_held_lock+0x36/0x1c0 [ 589.999422] ? check_same_owner+0x340/0x340 [ 590.003770] ? debug_mutex_init+0x2d/0x60 [ 590.007973] ? rcu_note_context_switch+0x680/0x680 [ 590.012960] __should_failslab+0x124/0x180 [ 590.017241] should_failslab+0x9/0x14 [ 590.021081] kmem_cache_alloc_trace+0x2b5/0x730 [ 590.025798] ? rcu_read_lock_sched_held+0x108/0x120 [ 590.030875] ? put_fs_context+0x560/0x560 [ 590.035070] legacy_init_fs_context+0x49/0xd0 [ 590.039608] ? refcount_inc_checked+0x29/0x70 [ 590.044133] vfs_new_fs_context+0x2c6/0x720 [ 590.048593] do_mount+0x605/0x1e30 [ 590.052179] ? rcu_is_watching+0x8c/0x150 [ 590.056395] ? trace_hardirqs_on+0xbd/0x2c0 [ 590.060774] ? copy_mount_string+0x40/0x40 [ 590.065066] ? copy_mount_options+0x5f/0x380 [ 590.069509] ? kmem_cache_alloc_trace+0x324/0x730 [ 590.074434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.079995] ? copy_mount_options+0x285/0x380 [ 590.084520] ksys_mount+0x12d/0x140 [ 590.088192] __x64_sys_mount+0xbe/0x150 [ 590.092252] do_syscall_64+0x1b9/0x820 [ 590.096158] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 590.101548] ? syscall_return_slowpath+0x5e0/0x5e0 [ 590.106504] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 590.111559] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 590.116607] ? recalc_sigpending_tsk+0x180/0x180 [ 590.121405] ? kasan_check_write+0x14/0x20 [ 590.125669] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.130548] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.135773] RIP: 0033:0x457099 [ 590.139048] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.157979] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 590.165729] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 590.173027] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 590.180321] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 590.187647] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 590.194948] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000005 03:51:26 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:26 executing program 0 (fault-call:3 fault-nth:6): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:26 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 590.293830] FAULT_INJECTION: forcing a failure. [ 590.293830] name failslab, interval 1, probability 0, space 0, times 0 [ 590.305266] CPU: 0 PID: 28574 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 590.313796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.323181] Call Trace: [ 590.325821] dump_stack+0x1c9/0x2b4 [ 590.329482] ? dump_stack_print_info.cold.2+0x52/0x52 [ 590.334727] should_fail.cold.4+0xa/0x11 [ 590.338851] ? fault_create_debugfs_attr+0x1f0/0x1f0 03:51:26 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 590.344025] ? save_stack+0xa9/0xd0 [ 590.347705] ? save_stack+0x43/0xd0 [ 590.351401] ? kasan_kmalloc+0xc4/0xe0 [ 590.355361] ? kmem_cache_alloc_trace+0x152/0x730 [ 590.360240] ? legacy_init_fs_context+0x49/0xd0 [ 590.364949] ? vfs_new_fs_context+0x2c6/0x720 [ 590.369482] ? do_mount+0x605/0x1e30 [ 590.373234] ? ksys_mount+0x12d/0x140 [ 590.377088] ? find_held_lock+0x36/0x1c0 [ 590.381209] ? check_same_owner+0x340/0x340 [ 590.385553] ? rcu_note_context_switch+0x680/0x680 [ 590.390492] ? rcu_is_watching+0x8c/0x150 [ 590.394664] ? trace_hardirqs_on+0xbd/0x2c0 [ 590.399041] __should_failslab+0x124/0x180 [ 590.403358] should_failslab+0x9/0x14 [ 590.407200] kmem_cache_alloc_trace+0x2b5/0x730 [ 590.411896] ? legacy_init_fs_context+0x49/0xd0 [ 590.416593] ? rcu_read_lock_sched_held+0x108/0x120 [ 590.421640] ? kmem_cache_alloc_trace+0x324/0x730 [ 590.426527] ? rcu_read_lock_sched_held+0x108/0x120 [ 590.431587] apparmor_fs_context_alloc+0x43/0xa0 [ 590.436383] security_fs_context_alloc+0x54/0xb0 [ 590.441156] vfs_new_fs_context+0x318/0x720 [ 590.445496] do_mount+0x605/0x1e30 [ 590.449077] ? copy_mount_string+0x40/0x40 [ 590.453365] ? retint_kernel+0x10/0x10 [ 590.457295] ? copy_mount_options+0x1a1/0x380 [ 590.461845] ? __sanitizer_cov_trace_pc+0x3b/0x50 [ 590.466712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.472276] ? copy_mount_options+0x285/0x380 [ 590.476818] ksys_mount+0x12d/0x140 [ 590.480475] __x64_sys_mount+0xbe/0x150 [ 590.484494] do_syscall_64+0x1b9/0x820 [ 590.488416] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 590.493813] ? syscall_return_slowpath+0x5e0/0x5e0 [ 590.498776] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 590.503832] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 590.508870] ? recalc_sigpending_tsk+0x180/0x180 [ 590.513647] ? kasan_check_write+0x14/0x20 [ 590.517909] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 590.522762] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.527975] RIP: 0033:0x457099 [ 590.531199] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 590.550128] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 590.557854] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 590.565136] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 590.572436] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 590.579730] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 590.587025] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000006 03:51:26 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:26 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:26 executing program 0 (fault-call:3 fault-nth:7): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:26 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 590.765591] FAULT_INJECTION: forcing a failure. [ 590.765591] name failslab, interval 1, probability 0, space 0, times 0 [ 590.777293] CPU: 0 PID: 28602 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 590.785841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 590.795254] Call Trace: [ 590.797874] dump_stack+0x1c9/0x2b4 [ 590.801585] ? dump_stack_print_info.cold.2+0x52/0x52 [ 590.806832] should_fail.cold.4+0xa/0x11 [ 590.810946] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 590.816076] ? save_stack+0xa9/0xd0 [ 590.819738] ? save_stack+0x43/0xd0 [ 590.823390] ? kasan_kmalloc+0xc4/0xe0 [ 590.827285] ? kmem_cache_alloc_trace+0x152/0x730 [ 590.832155] ? do_mount+0x605/0x1e30 [ 590.835912] ? ksys_mount+0x12d/0x140 [ 590.839755] ? __x64_sys_mount+0xbe/0x150 [ 590.843951] ? do_syscall_64+0x1b9/0x820 [ 590.848056] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 590.853454] ? do_mount+0x605/0x1e30 [ 590.857234] ? find_held_lock+0x36/0x1c0 [ 590.861417] ? check_same_owner+0x340/0x340 [ 590.865796] ? rcu_note_context_switch+0x680/0x680 [ 590.870774] __should_failslab+0x124/0x180 [ 590.875053] should_failslab+0x9/0x14 [ 590.878909] __kmalloc_track_caller+0x2ae/0x720 [ 590.883595] ? rcu_read_lock_sched_held+0x108/0x120 [ 590.888652] ? apparmor_fs_context_alloc+0x7e/0xa0 [ 590.893627] ? legacy_parse_monolithic+0xde/0x1e0 [ 590.898528] kmemdup+0x24/0x50 [ 590.901768] legacy_parse_monolithic+0xde/0x1e0 [ 590.906544] ? cmp_flag_name+0x50/0x50 [ 590.910469] do_mount+0x6d8/0x1e30 [ 590.914042] ? rcu_is_watching+0x8c/0x150 [ 590.918212] ? trace_hardirqs_on+0xbd/0x2c0 [ 590.922587] ? copy_mount_string+0x40/0x40 [ 590.926853] ? copy_mount_options+0x5f/0x380 [ 590.931272] ? kmem_cache_alloc_trace+0x324/0x730 [ 590.936126] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 590.941682] ? _copy_from_user+0xdf/0x150 [ 590.945870] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 590.951445] ? copy_mount_options+0x285/0x380 [ 590.955981] ksys_mount+0x12d/0x140 [ 590.959652] __x64_sys_mount+0xbe/0x150 [ 590.963661] do_syscall_64+0x1b9/0x820 [ 590.967584] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 590.972972] ? syscall_return_slowpath+0x5e0/0x5e0 [ 590.977910] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 590.982933] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 590.987968] ? recalc_sigpending_tsk+0x180/0x180 [ 590.992756] ? kasan_check_write+0x14/0x20 [ 590.997021] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.001894] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.007093] RIP: 0033:0x457099 [ 591.010302] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.029268] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 591.037014] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 591.044315] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 591.051645] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 591.058943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 03:51:27 executing program 0 (fault-call:3 fault-nth:8): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 591.066239] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000007 [ 591.126822] FAULT_INJECTION: forcing a failure. [ 591.126822] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 591.138999] CPU: 1 PID: 28619 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 591.147639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.157014] Call Trace: [ 591.159621] dump_stack+0x1c9/0x2b4 [ 591.163287] ? dump_stack_print_info.cold.2+0x52/0x52 [ 591.168522] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 591.173409] should_fail.cold.4+0xa/0x11 [ 591.177502] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 591.182632] ? rcu_is_watching+0x8c/0x150 [ 591.186814] ? graph_lock+0x170/0x170 [ 591.190639] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 591.195380] ? find_held_lock+0x36/0x1c0 [ 591.199492] ? check_same_owner+0x340/0x340 [ 591.203841] ? rcu_note_context_switch+0x680/0x680 [ 591.208811] ? legacy_parse_monolithic+0xde/0x1e0 [ 591.213703] __alloc_pages_nodemask+0x365/0xd10 [ 591.218412] ? __alloc_pages_slowpath+0x2cb0/0x2cb0 [ 591.223454] ? __kmalloc_track_caller+0x26e/0x720 [ 591.228316] ? rcu_is_watching+0x8c/0x150 [ 591.232507] ? trace_hardirqs_on+0xbd/0x2c0 [ 591.236844] ? rcu_pm_notify+0xc0/0xc0 [ 591.240788] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 591.246384] alloc_pages_current+0x10c/0x210 [ 591.250833] get_zeroed_page+0x14/0x50 [ 591.254756] legacy_validate+0x133/0x220 [ 591.258857] ? logfc+0x760/0x760 [ 591.262245] vfs_get_tree+0x144/0x5c0 [ 591.266057] do_mount+0x6f9/0x1e30 [ 591.269622] ? copy_mount_string+0x40/0x40 [ 591.273882] ? retint_kernel+0x10/0x10 [ 591.277783] ? copy_mount_options+0x1e3/0x380 [ 591.282311] ? __sanitizer_cov_trace_pc+0x1/0x50 [ 591.287125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.292697] ? copy_mount_options+0x285/0x380 [ 591.297219] ksys_mount+0x12d/0x140 [ 591.300864] __x64_sys_mount+0xbe/0x150 [ 591.304867] do_syscall_64+0x1b9/0x820 [ 591.308781] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 591.314239] ? syscall_return_slowpath+0x5e0/0x5e0 [ 591.319211] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 591.324354] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 591.329403] ? recalc_sigpending_tsk+0x180/0x180 [ 591.334306] ? kasan_check_write+0x14/0x20 [ 591.338598] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.343475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.348684] RIP: 0033:0x457099 [ 591.351900] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:51:27 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 591.370926] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 591.378651] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 591.385943] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 591.393297] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 591.400575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 591.407869] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000008 03:51:27 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:27 executing program 0 (fault-call:3 fault-nth:9): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:27 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 591.541995] FAULT_INJECTION: forcing a failure. [ 591.541995] name failslab, interval 1, probability 0, space 0, times 0 [ 591.553578] CPU: 1 PID: 28632 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 591.562084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.571457] Call Trace: [ 591.574076] dump_stack+0x1c9/0x2b4 [ 591.577817] ? dump_stack_print_info.cold.2+0x52/0x52 [ 591.583027] should_fail.cold.4+0xa/0x11 [ 591.587114] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 591.592268] ? kasan_check_read+0x11/0x20 [ 591.596447] ? rcu_is_watching+0x8c/0x150 [ 591.600646] ? find_held_lock+0x36/0x1c0 [ 591.604760] ? check_same_owner+0x340/0x340 [ 591.609114] ? rcu_note_context_switch+0x680/0x680 [ 591.614068] ? __kmalloc_track_caller+0x26e/0x720 [ 591.618933] __should_failslab+0x124/0x180 [ 591.623174] should_failslab+0x9/0x14 [ 591.626976] kmem_cache_alloc_trace+0x2b5/0x730 [ 591.631675] v9fs_mount+0x61/0x900 [ 591.635252] ? v9fs_drop_inode+0x150/0x150 03:51:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:27 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 591.639509] legacy_get_tree+0x131/0x460 [ 591.643599] vfs_get_tree+0x1cb/0x5c0 [ 591.647440] do_mount+0x6f9/0x1e30 [ 591.651014] ? rcu_is_watching+0x8c/0x150 [ 591.655180] ? trace_hardirqs_on+0xbd/0x2c0 [ 591.659506] ? copy_mount_string+0x40/0x40 [ 591.663751] ? copy_mount_options+0x5f/0x380 [ 591.668178] ? kmem_cache_alloc_trace+0x324/0x730 [ 591.673053] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 591.678617] ? _copy_from_user+0xdf/0x150 [ 591.682799] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 591.688390] ? copy_mount_options+0x285/0x380 [ 591.692906] ksys_mount+0x12d/0x140 [ 591.696573] __x64_sys_mount+0xbe/0x150 [ 591.700572] do_syscall_64+0x1b9/0x820 [ 591.704486] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 591.709876] ? syscall_return_slowpath+0x5e0/0x5e0 [ 591.714821] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.720238] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 591.725271] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 591.730302] ? prepare_exit_to_usermode+0x291/0x3b0 [ 591.735395] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 591.740309] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 591.745522] RIP: 0033:0x457099 [ 591.748722] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 591.767644] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 591.775384] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 591.782660] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 03:51:28 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 591.789956] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 591.797235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 591.804502] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000009 03:51:28 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:28 executing program 0 (fault-call:3 fault-nth:10): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 591.943411] FAULT_INJECTION: forcing a failure. [ 591.943411] name failslab, interval 1, probability 0, space 0, times 0 [ 591.954913] CPU: 0 PID: 28658 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 591.963440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 591.972823] Call Trace: [ 591.975448] dump_stack+0x1c9/0x2b4 [ 591.979090] ? dump_stack_print_info.cold.2+0x52/0x52 [ 591.984306] should_fail.cold.4+0xa/0x11 [ 591.988412] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 591.993551] ? find_held_lock+0x36/0x1c0 [ 591.997666] ? lock_downgrade+0x8f0/0x8f0 [ 592.001877] ? find_held_lock+0x36/0x1c0 [ 592.006030] ? check_same_owner+0x340/0x340 [ 592.010409] ? unwind_get_return_address+0x61/0xa0 [ 592.015391] ? rcu_note_context_switch+0x680/0x680 [ 592.020396] __should_failslab+0x124/0x180 [ 592.024682] should_failslab+0x9/0x14 [ 592.028525] __kmalloc_track_caller+0x2ae/0x720 [ 592.033241] ? save_stack+0xa9/0xd0 [ 592.036916] ? save_stack+0x43/0xd0 [ 592.040647] ? kasan_kmalloc+0xc4/0xe0 [ 592.044568] ? v9fs_mount+0x61/0x900 [ 592.048303] ? v9fs_session_init+0xdd/0x1a80 [ 592.052787] kstrdup+0x39/0x70 [ 592.056027] v9fs_session_init+0xdd/0x1a80 [ 592.060312] ? find_held_lock+0x36/0x1c0 [ 592.064444] ? v9fs_show_options+0x7e0/0x7e0 [ 592.068873] ? kmem_cache_alloc_trace+0x275/0x730 [ 592.073746] ? kasan_check_read+0x11/0x20 [ 592.077908] ? rcu_is_watching+0x8c/0x150 [ 592.082076] ? trace_hardirqs_on+0xbd/0x2c0 [ 592.086441] ? rcu_pm_notify+0xc0/0xc0 [ 592.090398] ? v9fs_mount+0x61/0x900 [ 592.094213] ? rcu_read_lock_sched_held+0x108/0x120 [ 592.099257] ? kmem_cache_alloc_trace+0x324/0x730 [ 592.104165] v9fs_mount+0x7c/0x900 [ 592.107743] ? v9fs_drop_inode+0x150/0x150 [ 592.112012] legacy_get_tree+0x131/0x460 [ 592.116091] vfs_get_tree+0x1cb/0x5c0 [ 592.119922] do_mount+0x6f9/0x1e30 [ 592.123507] ? copy_mount_string+0x40/0x40 [ 592.127831] ? retint_kernel+0x10/0x10 [ 592.131755] ? copy_mount_options+0x1f0/0x380 [ 592.136425] ? __sanitizer_cov_trace_pc+0x48/0x50 [ 592.141303] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.146899] ? copy_mount_options+0x285/0x380 [ 592.151437] ksys_mount+0x12d/0x140 [ 592.155090] __x64_sys_mount+0xbe/0x150 [ 592.159094] do_syscall_64+0x1b9/0x820 [ 592.163022] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 592.168495] ? syscall_return_slowpath+0x5e0/0x5e0 [ 592.173464] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 592.178501] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 592.183544] ? recalc_sigpending_tsk+0x180/0x180 [ 592.188322] ? kasan_check_write+0x14/0x20 [ 592.192607] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 592.197501] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.202711] RIP: 0033:0x457099 [ 592.206073] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.224991] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 592.232717] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 03:51:28 executing program 0 (fault-call:3 fault-nth:11): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 592.240016] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 592.247315] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 592.254645] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 592.261935] R13: 00000000004d3228 R14: 00000000004c81cc R15: 000000000000000a 03:51:28 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000008700", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 592.311794] FAULT_INJECTION: forcing a failure. [ 592.311794] name failslab, interval 1, probability 0, space 0, times 0 [ 592.323235] CPU: 1 PID: 28668 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 592.331746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.341115] Call Trace: [ 592.343737] dump_stack+0x1c9/0x2b4 [ 592.347402] ? dump_stack_print_info.cold.2+0x52/0x52 [ 592.352603] ? graph_lock+0x170/0x170 [ 592.356421] ? __lock_acquire+0x7fc/0x5020 [ 592.360699] should_fail.cold.4+0xa/0x11 [ 592.364802] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 592.369938] ? find_held_lock+0x36/0x1c0 [ 592.374025] ? lock_downgrade+0x8f0/0x8f0 [ 592.378195] ? find_held_lock+0x36/0x1c0 [ 592.382273] ? check_same_owner+0x340/0x340 [ 592.386614] ? rcu_note_context_switch+0x680/0x680 [ 592.391569] __should_failslab+0x124/0x180 [ 592.395827] should_failslab+0x9/0x14 [ 592.399727] kmem_cache_alloc_trace+0x2b5/0x730 [ 592.404420] ? save_stack+0xa9/0xd0 [ 592.408080] ? save_stack+0x43/0xd0 [ 592.411726] ? kasan_kmalloc+0xc4/0xe0 [ 592.415629] ? __kmalloc_track_caller+0x14a/0x720 [ 592.420504] ? kstrdup+0x39/0x70 [ 592.423901] ? v9fs_session_init+0x115/0x1a80 [ 592.428436] p9_client_create+0x11b/0x1702 [ 592.432713] ? p9_client_read+0xae0/0xae0 [ 592.436880] ? __kmalloc_track_caller+0x26e/0x720 [ 592.441735] ? __lockdep_init_map+0x105/0x590 [ 592.446238] ? lockdep_init_map+0x9/0x10 [ 592.450317] ? kasan_check_write+0x14/0x20 [ 592.454612] ? __init_rwsem+0x1cc/0x2a0 [ 592.458614] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 592.463728] ? rcu_read_lock_sched_held+0x108/0x120 [ 592.468777] ? __kmalloc_track_caller+0x590/0x720 [ 592.473637] ? save_stack+0xa9/0xd0 [ 592.477284] ? save_stack+0x43/0xd0 [ 592.480914] ? kasan_kmalloc+0xc4/0xe0 [ 592.484827] v9fs_session_init+0x21a/0x1a80 [ 592.489165] ? v9fs_session_init+0x21a/0x1a80 [ 592.493686] ? find_held_lock+0x36/0x1c0 [ 592.497818] ? v9fs_show_options+0x7e0/0x7e0 [ 592.502249] ? kmem_cache_alloc_trace+0x275/0x730 [ 592.507094] ? kasan_check_read+0x11/0x20 [ 592.511254] ? rcu_is_watching+0x8c/0x150 [ 592.515422] ? trace_hardirqs_on+0xbd/0x2c0 [ 592.519756] ? rcu_pm_notify+0xc0/0xc0 [ 592.523664] ? v9fs_mount+0x61/0x900 [ 592.527410] ? rcu_read_lock_sched_held+0x108/0x120 [ 592.532448] ? kmem_cache_alloc_trace+0x324/0x730 [ 592.537352] v9fs_mount+0x7c/0x900 [ 592.540922] ? v9fs_drop_inode+0x150/0x150 [ 592.545180] legacy_get_tree+0x131/0x460 [ 592.549273] vfs_get_tree+0x1cb/0x5c0 [ 592.553102] do_mount+0x6f9/0x1e30 [ 592.556666] ? rcu_is_watching+0x8c/0x150 [ 592.560999] ? trace_hardirqs_on+0xbd/0x2c0 [ 592.565360] ? copy_mount_string+0x40/0x40 [ 592.569621] ? copy_mount_options+0x5f/0x380 [ 592.574052] ? kmem_cache_alloc_trace+0x324/0x730 [ 592.578923] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 592.584485] ? _copy_from_user+0xdf/0x150 [ 592.588959] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 592.594520] ? copy_mount_options+0x285/0x380 [ 592.599193] ksys_mount+0x12d/0x140 [ 592.602847] __x64_sys_mount+0xbe/0x150 [ 592.606846] do_syscall_64+0x1b9/0x820 [ 592.610747] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 592.616119] ? syscall_return_slowpath+0x5e0/0x5e0 [ 592.621063] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 592.626089] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 592.631133] ? recalc_sigpending_tsk+0x180/0x180 [ 592.635990] ? kasan_check_write+0x14/0x20 [ 592.640240] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 592.645114] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 592.650320] RIP: 0033:0x457099 [ 592.653550] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 592.672455] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 592.680193] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 592.687472] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 592.694764] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 592.702054] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 03:51:28 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 592.709364] R13: 00000000004d3228 R14: 00000000004c81cc R15: 000000000000000b 03:51:28 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:28 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:29 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000bf00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:29 executing program 0 (fault-call:3 fault-nth:12): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 03:51:29 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 592.934420] FAULT_INJECTION: forcing a failure. [ 592.934420] name failslab, interval 1, probability 0, space 0, times 0 [ 592.945772] CPU: 0 PID: 28710 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 592.954278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 592.963632] Call Trace: [ 592.966242] dump_stack+0x1c9/0x2b4 [ 592.969893] ? dump_stack_print_info.cold.2+0x52/0x52 [ 592.975116] should_fail.cold.4+0xa/0x11 [ 592.979205] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 592.984368] ? save_stack+0xa9/0xd0 [ 592.988029] ? kasan_kmalloc+0xc4/0xe0 [ 592.991930] ? kmem_cache_alloc_trace+0x152/0x730 [ 592.996803] ? p9_client_create+0x11b/0x1702 [ 593.001243] ? v9fs_session_init+0x21a/0x1a80 [ 593.005775] ? v9fs_mount+0x7c/0x900 [ 593.009521] ? legacy_get_tree+0x131/0x460 [ 593.013788] ? vfs_get_tree+0x1cb/0x5c0 [ 593.017807] ? find_held_lock+0x36/0x1c0 [ 593.021888] ? cfg80211_wext_siwfrag+0xd8/0xa00 [ 593.026575] ? check_same_owner+0x340/0x340 [ 593.030931] ? rcu_note_context_switch+0x680/0x680 [ 593.035892] ? trace_hardirqs_on+0xbd/0x2c0 [ 593.040250] __should_failslab+0x124/0x180 [ 593.044530] should_failslab+0x9/0x14 [ 593.048367] __kmalloc_track_caller+0x2ae/0x720 [ 593.053073] ? p9_client_create+0x11b/0x1702 [ 593.057532] ? rcu_read_lock_sched_held+0x108/0x120 [ 593.062553] ? kmem_cache_alloc_trace+0x324/0x730 [ 593.067413] ? save_stack+0xa9/0xd0 [ 593.071080] ? p9_client_create+0x490/0x1702 [ 593.075532] kstrdup+0x39/0x70 [ 593.078771] p9_client_create+0x490/0x1702 [ 593.083043] ? p9_client_read+0xae0/0xae0 [ 593.087223] ? cfg80211_wext_siwfrag+0xd8/0xa00 [ 593.091951] ? __kmalloc_track_caller+0x26e/0x720 [ 593.096851] ? __lockdep_init_map+0x105/0x590 [ 593.101404] ? lockdep_init_map+0x9/0x10 [ 593.105500] ? kasan_check_write+0x14/0x20 [ 593.109788] ? __init_rwsem+0x1cc/0x2a0 [ 593.113798] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 593.118836] ? rcu_read_lock_sched_held+0x108/0x120 [ 593.123875] ? __kmalloc_track_caller+0x590/0x720 [ 593.128753] ? save_stack+0xa9/0xd0 [ 593.132420] ? save_stack+0x43/0xd0 [ 593.136173] ? kasan_kmalloc+0xc4/0xe0 [ 593.140110] v9fs_session_init+0x21a/0x1a80 [ 593.144466] ? v9fs_session_init+0x21a/0x1a80 [ 593.149002] ? find_held_lock+0x36/0x1c0 [ 593.153142] ? v9fs_show_options+0x7e0/0x7e0 [ 593.157589] ? kmem_cache_alloc_trace+0x275/0x730 [ 593.162559] ? kasan_check_read+0x11/0x20 [ 593.166722] ? rcu_is_watching+0x8c/0x150 [ 593.170883] ? trace_hardirqs_on+0xbd/0x2c0 [ 593.175244] ? rcu_pm_notify+0xc0/0xc0 [ 593.179180] ? v9fs_mount+0x61/0x900 [ 593.182921] ? rcu_read_lock_sched_held+0x108/0x120 [ 593.187973] ? kmem_cache_alloc_trace+0x324/0x730 [ 593.192875] v9fs_mount+0x7c/0x900 [ 593.196461] ? v9fs_drop_inode+0x150/0x150 [ 593.200728] legacy_get_tree+0x131/0x460 [ 593.204832] vfs_get_tree+0x1cb/0x5c0 [ 593.208671] do_mount+0x6f9/0x1e30 [ 593.212249] ? rcu_is_watching+0x8c/0x150 [ 593.216429] ? trace_hardirqs_on+0xbd/0x2c0 [ 593.220795] ? copy_mount_string+0x40/0x40 [ 593.225071] ? copy_mount_options+0x5f/0x380 [ 593.229519] ? kmem_cache_alloc_trace+0x324/0x730 [ 593.234418] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 593.240062] ? _copy_from_user+0xdf/0x150 [ 593.244256] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.249823] ? copy_mount_options+0x285/0x380 [ 593.254390] ksys_mount+0x12d/0x140 [ 593.258060] __x64_sys_mount+0xbe/0x150 [ 593.262118] do_syscall_64+0x1b9/0x820 [ 593.266026] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 593.271429] ? syscall_return_slowpath+0x5e0/0x5e0 [ 593.276400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.281373] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 593.286427] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 593.291478] ? prepare_exit_to_usermode+0x291/0x3b0 [ 593.296541] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.301436] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.306652] RIP: 0033:0x457099 [ 593.309880] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:51:29 executing program 0 (fault-call:3 fault-nth:13): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 593.328810] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 593.336558] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 593.343854] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 593.351156] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 593.358459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 593.365763] R13: 00000000004d3228 R14: 00000000004c81cc R15: 000000000000000c [ 593.420289] FAULT_INJECTION: forcing a failure. [ 593.420289] name failslab, interval 1, probability 0, space 0, times 0 [ 593.431863] CPU: 1 PID: 28730 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 593.440388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 593.449759] Call Trace: [ 593.452382] dump_stack+0x1c9/0x2b4 [ 593.456014] ? dump_stack_print_info.cold.2+0x52/0x52 [ 593.461222] ? _raw_spin_unlock_irq+0x56/0x70 [ 593.465754] should_fail.cold.4+0xa/0x11 [ 593.469830] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 593.474945] ? __switch_to_asm+0x40/0x70 [ 593.479025] ? __switch_to_asm+0x34/0x70 [ 593.483099] ? __switch_to_asm+0x40/0x70 [ 593.487178] ? __switch_to_asm+0x34/0x70 [ 593.491255] ? __switch_to_asm+0x40/0x70 [ 593.495371] ? __switch_to_asm+0x34/0x70 [ 593.499462] ? __switch_to_asm+0x34/0x70 [ 593.503552] ? __switch_to_asm+0x40/0x70 [ 593.507638] ? __switch_to_asm+0x40/0x70 [ 593.511727] ? __switch_to_asm+0x34/0x70 [ 593.515817] ? __switch_to_asm+0x40/0x70 [ 593.519906] ? __schedule+0x884/0x1df0 [ 593.523807] ? v9fs_session_init+0x21a/0x1a80 [ 593.528317] ? v9fs_mount+0x7c/0x900 [ 593.532082] ? __sched_text_start+0x8/0x8 [ 593.536243] ? find_held_lock+0x36/0x1c0 [ 593.540372] ? check_same_owner+0x340/0x340 [ 593.544729] ? rcu_is_watching+0x8c/0x150 [ 593.548905] ? trace_hardirqs_on+0xbd/0x2c0 [ 593.553263] __should_failslab+0x124/0x180 [ 593.557532] should_failslab+0x9/0x14 [ 593.561392] __kmalloc_track_caller+0x2ae/0x720 [ 593.566095] ? p9_client_create+0x11b/0x1702 [ 593.570522] ? rcu_read_lock_sched_held+0x108/0x120 [ 593.575554] ? kmem_cache_alloc_trace+0x324/0x730 [ 593.580432] ? save_stack+0xa9/0xd0 [ 593.584087] ? p9_client_create+0x490/0x1702 [ 593.588533] kstrdup+0x39/0x70 [ 593.591757] p9_client_create+0x490/0x1702 [ 593.596011] ? p9_client_read+0xae0/0xae0 [ 593.600181] ? __kmalloc_track_caller+0x26e/0x720 [ 593.605047] ? __lockdep_init_map+0x105/0x590 [ 593.609567] ? lockdep_init_map+0x9/0x10 [ 593.613658] ? kasan_check_write+0x14/0x20 [ 593.617916] ? __init_rwsem+0x1cc/0x2a0 [ 593.621920] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 593.626953] ? rcu_read_lock_sched_held+0x108/0x120 [ 593.631983] ? __kmalloc_track_caller+0x590/0x720 [ 593.636862] ? save_stack+0xa9/0xd0 [ 593.640504] ? save_stack+0x43/0xd0 [ 593.644129] ? kasan_kmalloc+0xc4/0xe0 [ 593.648040] v9fs_session_init+0x21a/0x1a80 [ 593.652401] ? v9fs_session_init+0x21a/0x1a80 [ 593.656924] ? find_held_lock+0x36/0x1c0 [ 593.661017] ? v9fs_show_options+0x7e0/0x7e0 [ 593.665441] ? kmem_cache_alloc_trace+0x275/0x730 [ 593.670298] ? kasan_check_read+0x11/0x20 [ 593.674501] ? rcu_is_watching+0x8c/0x150 [ 593.678674] ? trace_hardirqs_on+0xbd/0x2c0 [ 593.683019] ? rcu_pm_notify+0xc0/0xc0 [ 593.686927] ? v9fs_mount+0x61/0x900 [ 593.690655] ? rcu_read_lock_sched_held+0x108/0x120 [ 593.695702] ? kmem_cache_alloc_trace+0x324/0x730 [ 593.700570] v9fs_mount+0x7c/0x900 [ 593.704126] ? v9fs_drop_inode+0x150/0x150 [ 593.708391] legacy_get_tree+0x131/0x460 [ 593.712502] vfs_get_tree+0x1cb/0x5c0 [ 593.716360] do_mount+0x6f9/0x1e30 [ 593.720420] ? rcu_is_watching+0x8c/0x150 [ 593.724595] ? copy_mount_string+0x40/0x40 [ 593.728866] ? retint_kernel+0x10/0x10 [ 593.732788] ? copy_mount_options+0x1a1/0x380 [ 593.737305] ? copy_mount_options+0x1d0/0x380 [ 593.741871] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 593.747437] ? copy_mount_options+0x285/0x380 [ 593.751961] ksys_mount+0x12d/0x140 [ 593.755611] __x64_sys_mount+0xbe/0x150 [ 593.759610] do_syscall_64+0x1b9/0x820 [ 593.763523] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 593.768917] ? syscall_return_slowpath+0x5e0/0x5e0 [ 593.773877] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.778745] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 593.783789] ? prepare_exit_to_usermode+0x291/0x3b0 [ 593.788832] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 593.793713] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 593.798921] RIP: 0033:0x457099 [ 593.802129] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 03:51:30 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:30 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:30 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 593.821121] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 593.828855] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 593.836133] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 593.843415] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 593.850842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 593.858120] R13: 00000000004d3228 R14: 00000000004c81cc R15: 000000000000000d 03:51:30 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:30 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e74318700", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:30 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:30 executing program 0 (fault-call:3 fault-nth:14): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 594.042581] FAULT_INJECTION: forcing a failure. [ 594.042581] name failslab, interval 1, probability 0, space 0, times 0 [ 594.053978] CPU: 0 PID: 28764 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 594.062497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.071886] Call Trace: [ 594.074532] dump_stack+0x1c9/0x2b4 [ 594.078215] ? dump_stack_print_info.cold.2+0x52/0x52 [ 594.083454] should_fail.cold.4+0xa/0x11 [ 594.087559] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 594.092725] ? save_stack+0x43/0xd0 [ 594.096414] ? kasan_kmalloc+0xc4/0xe0 [ 594.100326] ? __kmalloc_track_caller+0x14a/0x720 [ 594.105209] ? kstrdup+0x39/0x70 [ 594.108602] ? p9_client_create+0x490/0x1702 [ 594.113058] ? v9fs_session_init+0x21a/0x1a80 [ 594.117581] ? legacy_get_tree+0x131/0x460 [ 594.121840] ? vfs_get_tree+0x1cb/0x5c0 [ 594.125859] ? do_mount+0x6f9/0x1e30 [ 594.129603] ? ksys_mount+0x12d/0x140 [ 594.133436] ? __x64_sys_mount+0xbe/0x150 [ 594.137627] ? do_syscall_64+0x1b9/0x820 [ 594.141741] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.147165] ? find_held_lock+0x36/0x1c0 [ 594.151318] ? check_same_owner+0x340/0x340 [ 594.155713] ? trace_hardirqs_on+0xbd/0x2c0 [ 594.160082] ? rcu_note_context_switch+0x680/0x680 [ 594.165049] __should_failslab+0x124/0x180 [ 594.169313] should_failslab+0x9/0x14 [ 594.173193] __kmalloc+0x2b2/0x720 [ 594.176791] ? match_wildcard+0x3c0/0x3c0 [ 594.180990] ? match_strdup+0x5e/0xa0 [ 594.184829] match_strdup+0x5e/0xa0 [ 594.188490] p9_client_create+0x690/0x1702 [ 594.192765] ? p9_client_read+0xae0/0xae0 [ 594.196966] ? __kmalloc_track_caller+0x26e/0x720 [ 594.201861] ? __lockdep_init_map+0x105/0x590 [ 594.206417] ? lockdep_init_map+0x9/0x10 [ 594.210522] ? kasan_check_write+0x14/0x20 [ 594.214791] ? __init_rwsem+0x1cc/0x2a0 [ 594.218808] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 594.223871] ? rcu_read_lock_sched_held+0x108/0x120 [ 594.228921] ? __kmalloc_track_caller+0x590/0x720 [ 594.233803] ? save_stack+0x43/0xd0 [ 594.237461] ? kasan_kmalloc+0xc4/0xe0 [ 594.241422] v9fs_session_init+0x21a/0x1a80 [ 594.245770] ? v9fs_session_init+0x21a/0x1a80 [ 594.250306] ? find_held_lock+0x36/0x1c0 [ 594.254460] ? v9fs_show_options+0x7e0/0x7e0 [ 594.258909] ? kmem_cache_alloc_trace+0x275/0x730 [ 594.263793] ? kasan_check_read+0x11/0x20 [ 594.267974] ? rcu_is_watching+0x8c/0x150 [ 594.272157] ? trace_hardirqs_on+0xbd/0x2c0 [ 594.276513] ? rcu_pm_notify+0xc0/0xc0 [ 594.280455] ? v9fs_mount+0x61/0x900 [ 594.284205] ? rcu_read_lock_sched_held+0x108/0x120 [ 594.289259] ? kmem_cache_alloc_trace+0x324/0x730 [ 594.294157] v9fs_mount+0x7c/0x900 [ 594.297739] ? v9fs_drop_inode+0x150/0x150 [ 594.302007] legacy_get_tree+0x131/0x460 [ 594.306114] vfs_get_tree+0x1cb/0x5c0 [ 594.309963] do_mount+0x6f9/0x1e30 [ 594.313528] ? rcu_is_watching+0x8c/0x150 [ 594.317692] ? trace_hardirqs_on+0xbd/0x2c0 [ 594.322040] ? copy_mount_string+0x40/0x40 [ 594.326809] ? copy_mount_options+0x5f/0x380 [ 594.331241] ? kmem_cache_alloc_trace+0x324/0x730 [ 594.336106] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 594.341665] ? _copy_from_user+0xdf/0x150 [ 594.345845] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.351403] ? copy_mount_options+0x285/0x380 [ 594.355941] ksys_mount+0x12d/0x140 [ 594.359579] __x64_sys_mount+0xbe/0x150 [ 594.363591] do_syscall_64+0x1b9/0x820 [ 594.367516] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 594.372919] ? syscall_return_slowpath+0x5e0/0x5e0 [ 594.377879] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 594.382916] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 594.387965] ? recalc_sigpending_tsk+0x180/0x180 [ 594.392746] ? kasan_check_write+0x14/0x20 [ 594.397011] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.401904] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.407112] RIP: 0033:0x457099 [ 594.410322] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.429395] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 594.437137] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 03:51:30 executing program 0 (fault-call:3 fault-nth:15): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 594.444438] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 594.451739] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 594.459037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 594.466358] R13: 00000000004d3228 R14: 00000000004c81cc R15: 000000000000000e [ 594.519313] FAULT_INJECTION: forcing a failure. [ 594.519313] name failslab, interval 1, probability 0, space 0, times 0 [ 594.530859] CPU: 0 PID: 28782 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 594.539473] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 594.548856] Call Trace: [ 594.551488] dump_stack+0x1c9/0x2b4 [ 594.555149] ? dump_stack_print_info.cold.2+0x52/0x52 [ 594.560403] should_fail.cold.4+0xa/0x11 [ 594.564588] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 594.569759] ? find_held_lock+0x36/0x1c0 [ 594.573870] ? check_same_owner+0x340/0x340 [ 594.578219] ? __kernel_text_address+0xd/0x40 [ 594.582760] ? rcu_note_context_switch+0x680/0x680 [ 594.587744] __should_failslab+0x124/0x180 [ 594.592023] should_failslab+0x9/0x14 [ 594.595871] __kmalloc_track_caller+0x2ae/0x720 [ 594.600594] ? save_stack+0xa9/0xd0 [ 594.604256] ? parse_opts+0x176/0x500 [ 594.608089] kstrdup+0x39/0x70 [ 594.611359] parse_opts+0x176/0x500 [ 594.615012] ? trace_hardirqs_off+0xb8/0x2b0 [ 594.619470] ? do_raw_spin_unlock+0xa7/0x2f0 [ 594.623927] ? p9_fd_poll+0x2b0/0x2b0 [ 594.627761] ? kasan_check_write+0x14/0x20 [ 594.632054] ? trace_hardirqs_off+0xb8/0x2b0 [ 594.636520] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 594.641666] ? trace_hardirqs_on+0x2c0/0x2c0 [ 594.646120] ? kfree+0x111/0x210 [ 594.649526] ? kfree+0x111/0x210 [ 594.652929] ? lockdep_hardirqs_on+0x421/0x5c0 [ 594.657573] p9_fd_create+0x8b/0x3f0 [ 594.661375] ? p9_fd_show_options+0x1c0/0x1c0 [ 594.666324] ? p9_client_create+0xc16/0x1702 [ 594.670822] p9_client_create+0x877/0x1702 [ 594.675102] ? p9_client_read+0xae0/0xae0 [ 594.679421] ? __kmalloc_track_caller+0x26e/0x720 [ 594.684303] ? __lockdep_init_map+0x105/0x590 [ 594.688866] ? lockdep_init_map+0x9/0x10 [ 594.692966] ? kasan_check_write+0x14/0x20 [ 594.697232] ? __init_rwsem+0x1cc/0x2a0 [ 594.701242] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 594.706300] ? rcu_read_lock_sched_held+0x108/0x120 [ 594.711391] ? __kmalloc_track_caller+0x590/0x720 [ 594.716252] ? save_stack+0x43/0xd0 [ 594.719897] ? kasan_kmalloc+0xc4/0xe0 [ 594.723828] v9fs_session_init+0x21a/0x1a80 [ 594.728185] ? v9fs_session_init+0x21a/0x1a80 [ 594.732892] ? find_held_lock+0x36/0x1c0 [ 594.737015] ? v9fs_show_options+0x7e0/0x7e0 [ 594.741585] ? kmem_cache_alloc_trace+0x275/0x730 [ 594.746466] ? kasan_check_read+0x11/0x20 [ 594.750648] ? rcu_is_watching+0x8c/0x150 [ 594.754826] ? trace_hardirqs_on+0xbd/0x2c0 [ 594.759181] ? rcu_pm_notify+0xc0/0xc0 [ 594.763122] ? v9fs_mount+0x61/0x900 [ 594.766876] ? rcu_read_lock_sched_held+0x108/0x120 [ 594.771913] ? kmem_cache_alloc_trace+0x324/0x730 [ 594.776776] v9fs_mount+0x7c/0x900 [ 594.780383] ? v9fs_drop_inode+0x150/0x150 [ 594.784656] legacy_get_tree+0x131/0x460 [ 594.788754] vfs_get_tree+0x1cb/0x5c0 [ 594.792601] do_mount+0x6f9/0x1e30 [ 594.796173] ? rcu_is_watching+0x8c/0x150 [ 594.800395] ? trace_hardirqs_on+0xbd/0x2c0 [ 594.804764] ? copy_mount_string+0x40/0x40 [ 594.809031] ? copy_mount_options+0x5f/0x380 [ 594.813482] ? kmem_cache_alloc_trace+0x324/0x730 [ 594.818402] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 594.823977] ? _copy_from_user+0xdf/0x150 [ 594.828168] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 594.833743] ? copy_mount_options+0x285/0x380 [ 594.838281] ksys_mount+0x12d/0x140 [ 594.841952] __x64_sys_mount+0xbe/0x150 [ 594.846054] do_syscall_64+0x1b9/0x820 [ 594.849979] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 594.855406] ? syscall_return_slowpath+0x5e0/0x5e0 [ 594.860400] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.865282] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 594.870368] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 594.875511] ? prepare_exit_to_usermode+0x291/0x3b0 [ 594.880575] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 594.885472] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 594.890686] RIP: 0033:0x457099 [ 594.893915] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 594.912841] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 03:51:31 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:31 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:31 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:31 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:31 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 594.920591] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 594.927887] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 594.935199] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 594.942495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 594.949794] R13: 00000000004d3228 R14: 00000000004c81cc R15: 000000000000000f [ 594.957252] 9pnet: Insufficient options for proto=fd 03:51:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:31 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000008200", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:31 executing program 0 (fault-call:3 fault-nth:16): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 595.122098] FAULT_INJECTION: forcing a failure. [ 595.122098] name failslab, interval 1, probability 0, space 0, times 0 [ 595.133516] CPU: 1 PID: 28812 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 595.142020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.151387] Call Trace: [ 595.153996] dump_stack+0x1c9/0x2b4 [ 595.157630] ? dump_stack_print_info.cold.2+0x52/0x52 [ 595.162905] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 595.167622] should_fail.cold.4+0xa/0x11 [ 595.171726] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 595.176858] ? __kernel_text_address+0xd/0x40 [ 595.181401] ? unwind_get_return_address+0x61/0xa0 [ 595.186392] ? find_held_lock+0x36/0x1c0 [ 595.190474] ? check_same_owner+0x340/0x340 [ 595.194825] ? rcu_note_context_switch+0x680/0x680 [ 595.199808] __should_failslab+0x124/0x180 [ 595.204072] should_failslab+0x9/0x14 [ 595.207899] __kmalloc+0x2b2/0x720 [ 595.211470] ? rcu_pm_notify+0xc0/0xc0 [ 595.215403] ? match_number.isra.0+0xbf/0x280 [ 595.219925] match_number.isra.0+0xbf/0x280 [ 595.224252] ? match_strdup+0xa0/0xa0 [ 595.228061] ? match_wildcard+0x3c0/0x3c0 [ 595.232216] match_int+0x23/0x30 [ 595.235591] parse_opts+0x32c/0x500 [ 595.239223] ? p9_fd_poll+0x2b0/0x2b0 [ 595.243040] ? kasan_check_write+0x14/0x20 [ 595.247296] ? trace_hardirqs_off+0xb8/0x2b0 [ 595.251773] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 595.256910] ? kfree+0x111/0x210 [ 595.260307] ? kfree+0x111/0x210 [ 595.263739] ? lockdep_hardirqs_on+0x421/0x5c0 [ 595.268394] p9_fd_create+0x8b/0x3f0 [ 595.272145] ? p9_fd_show_options+0x1c0/0x1c0 [ 595.276664] ? p9_client_create+0xc16/0x1702 [ 595.281152] p9_client_create+0x877/0x1702 [ 595.285420] ? p9_client_read+0xae0/0xae0 [ 595.289613] ? __kmalloc_track_caller+0x26e/0x720 [ 595.294485] ? __lockdep_init_map+0x105/0x590 [ 595.299007] ? lockdep_init_map+0x9/0x10 [ 595.303073] ? kasan_check_write+0x14/0x20 [ 595.307320] ? __init_rwsem+0x1cc/0x2a0 [ 595.311367] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 595.316408] ? rcu_read_lock_sched_held+0x108/0x120 [ 595.321450] ? __kmalloc_track_caller+0x590/0x720 [ 595.326321] ? save_stack+0x43/0xd0 [ 595.330000] ? kasan_kmalloc+0xc4/0xe0 [ 595.334002] v9fs_session_init+0x21a/0x1a80 [ 595.338362] ? v9fs_session_init+0x21a/0x1a80 [ 595.342898] ? find_held_lock+0x36/0x1c0 [ 595.346985] ? v9fs_show_options+0x7e0/0x7e0 [ 595.351410] ? kmem_cache_alloc_trace+0x275/0x730 [ 595.356391] ? kasan_check_read+0x11/0x20 [ 595.360566] ? rcu_is_watching+0x8c/0x150 [ 595.364740] ? trace_hardirqs_on+0xbd/0x2c0 [ 595.369075] ? rcu_pm_notify+0xc0/0xc0 [ 595.372986] ? v9fs_mount+0x61/0x900 [ 595.376727] ? rcu_read_lock_sched_held+0x108/0x120 [ 595.381763] ? kmem_cache_alloc_trace+0x324/0x730 [ 595.386618] v9fs_mount+0x7c/0x900 [ 595.390168] ? v9fs_drop_inode+0x150/0x150 [ 595.394415] legacy_get_tree+0x131/0x460 [ 595.398502] vfs_get_tree+0x1cb/0x5c0 [ 595.402318] do_mount+0x6f9/0x1e30 [ 595.405909] ? rcu_is_watching+0x8c/0x150 [ 595.410075] ? trace_hardirqs_on+0xbd/0x2c0 [ 595.414424] ? copy_mount_string+0x40/0x40 [ 595.418687] ? copy_mount_options+0x5f/0x380 [ 595.423117] ? kmem_cache_alloc_trace+0x324/0x730 [ 595.427983] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 595.433535] ? _copy_from_user+0xdf/0x150 [ 595.437718] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.443269] ? copy_mount_options+0x285/0x380 [ 595.447782] ksys_mount+0x12d/0x140 [ 595.451434] __x64_sys_mount+0xbe/0x150 [ 595.455425] do_syscall_64+0x1b9/0x820 [ 595.459367] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 595.464763] ? syscall_return_slowpath+0x5e0/0x5e0 [ 595.469715] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 595.474755] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 595.479786] ? recalc_sigpending_tsk+0x180/0x180 [ 595.484544] ? kasan_check_write+0x14/0x20 [ 595.488796] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 595.493663] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.498879] RIP: 0033:0x457099 [ 595.502097] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 595.521021] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 595.528755] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 595.536036] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 595.543312] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 595.550705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 595.557994] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000010 03:51:31 executing program 0 (fault-call:3 fault-nth:17): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 595.570888] 9pnet: Insufficient options for proto=fd [ 595.621167] FAULT_INJECTION: forcing a failure. [ 595.621167] name failslab, interval 1, probability 0, space 0, times 0 [ 595.632810] CPU: 0 PID: 28831 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 595.641324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 595.650720] Call Trace: [ 595.653376] dump_stack+0x1c9/0x2b4 [ 595.657057] ? dump_stack_print_info.cold.2+0x52/0x52 [ 595.662290] should_fail.cold.4+0xa/0x11 [ 595.666426] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 595.671573] ? __save_stack_trace+0x8d/0xf0 [ 595.675938] ? save_stack+0xa9/0xd0 [ 595.679651] ? save_stack+0x43/0xd0 [ 595.683318] ? find_held_lock+0x36/0x1c0 [ 595.687554] ? check_same_owner+0x340/0x340 [ 595.691917] ? rcu_note_context_switch+0x680/0x680 [ 595.696883] __should_failslab+0x124/0x180 [ 595.701149] should_failslab+0x9/0x14 [ 595.704984] __kmalloc+0x2b2/0x720 [ 595.708545] ? match_number.isra.0+0xbf/0x280 [ 595.713085] match_number.isra.0+0xbf/0x280 [ 595.717464] ? match_strdup+0xa0/0xa0 [ 595.721579] ? match_wildcard+0x3c0/0x3c0 [ 595.725917] match_int+0x23/0x30 [ 595.729372] parse_opts+0x32c/0x500 [ 595.733064] ? p9_fd_poll+0x2b0/0x2b0 [ 595.736899] ? kasan_check_write+0x14/0x20 [ 595.741294] ? trace_hardirqs_off+0xb8/0x2b0 [ 595.745783] ? _raw_spin_unlock_irqrestore+0x63/0xc0 [ 595.750940] ? kfree+0x111/0x210 [ 595.754383] ? kfree+0x111/0x210 [ 595.757782] ? lockdep_hardirqs_on+0x421/0x5c0 [ 595.762430] p9_fd_create+0x8b/0x3f0 [ 595.766178] ? p9_fd_show_options+0x1c0/0x1c0 [ 595.770706] ? p9_client_create+0xc16/0x1702 [ 595.775173] p9_client_create+0x877/0x1702 [ 595.779470] ? p9_client_read+0xae0/0xae0 [ 595.783677] ? __kmalloc_track_caller+0x26e/0x720 [ 595.788559] ? __lockdep_init_map+0x105/0x590 [ 595.793094] ? lockdep_init_map+0x9/0x10 [ 595.797197] ? kasan_check_write+0x14/0x20 [ 595.801457] ? __init_rwsem+0x1cc/0x2a0 [ 595.805447] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 595.810503] ? rcu_read_lock_sched_held+0x108/0x120 [ 595.815557] ? __kmalloc_track_caller+0x590/0x720 [ 595.820442] ? save_stack+0x43/0xd0 [ 595.824089] ? kasan_kmalloc+0xc4/0xe0 [ 595.828017] v9fs_session_init+0x21a/0x1a80 [ 595.832401] ? v9fs_session_init+0x21a/0x1a80 [ 595.836933] ? find_held_lock+0x36/0x1c0 [ 595.841059] ? v9fs_show_options+0x7e0/0x7e0 [ 595.845506] ? kmem_cache_alloc_trace+0x275/0x730 [ 595.850407] ? kasan_check_read+0x11/0x20 [ 595.854577] ? rcu_is_watching+0x8c/0x150 [ 595.858738] ? trace_hardirqs_on+0xbd/0x2c0 [ 595.863097] ? rcu_pm_notify+0xc0/0xc0 [ 595.867036] ? v9fs_mount+0x61/0x900 [ 595.870903] ? rcu_read_lock_sched_held+0x108/0x120 [ 595.875957] ? kmem_cache_alloc_trace+0x324/0x730 [ 595.880853] v9fs_mount+0x7c/0x900 [ 595.884430] ? v9fs_drop_inode+0x150/0x150 [ 595.888687] legacy_get_tree+0x131/0x460 [ 595.892782] vfs_get_tree+0x1cb/0x5c0 [ 595.896625] do_mount+0x6f9/0x1e30 [ 595.900201] ? rcu_is_watching+0x8c/0x150 [ 595.904403] ? trace_hardirqs_on+0xbd/0x2c0 [ 595.908762] ? copy_mount_string+0x40/0x40 [ 595.913027] ? copy_mount_options+0x5f/0x380 [ 595.917458] ? kmem_cache_alloc_trace+0x324/0x730 [ 595.922378] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 595.927959] ? _copy_from_user+0xdf/0x150 [ 595.932137] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 595.937695] ? copy_mount_options+0x285/0x380 [ 595.942232] ksys_mount+0x12d/0x140 [ 595.945899] __x64_sys_mount+0xbe/0x150 [ 595.949918] do_syscall_64+0x1b9/0x820 [ 595.953840] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 595.959246] ? syscall_return_slowpath+0x5e0/0x5e0 [ 595.964214] ? trace_hardirqs_off_thunk+0x1a/0x1c 03:51:32 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) 03:51:32 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 595.969099] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 595.974162] ? prepare_exit_to_usermode+0x291/0x3b0 [ 595.979226] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 595.984119] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 595.989367] RIP: 0033:0x457099 [ 595.992592] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 596.011533] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 596.019282] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 596.026574] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 596.034029] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 596.041360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 596.048664] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000011 [ 596.056095] 9pnet: Insufficient options for proto=fd 03:51:32 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:32 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431008700", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:32 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:32 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000000000000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000e00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:32 executing program 0 (fault-call:3 fault-nth:18): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 596.253785] FAULT_INJECTION: forcing a failure. [ 596.253785] name failslab, interval 1, probability 0, space 0, times 0 [ 596.265246] CPU: 1 PID: 28870 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 596.273755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.283107] Call Trace: [ 596.285719] dump_stack+0x1c9/0x2b4 [ 596.289397] ? dump_stack_print_info.cold.2+0x52/0x52 [ 596.294620] should_fail.cold.4+0xa/0x11 [ 596.298717] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 596.303844] ? __switch_to_asm+0x40/0x70 [ 596.307930] ? __switch_to_asm+0x34/0x70 [ 596.312012] ? __switch_to_asm+0x40/0x70 [ 596.316092] ? __switch_to_asm+0x34/0x70 [ 596.320174] ? __switch_to_asm+0x40/0x70 [ 596.324239] ? __switch_to_asm+0x34/0x70 [ 596.328399] ? __switch_to_asm+0x34/0x70 [ 596.332492] ? __switch_to_asm+0x40/0x70 [ 596.336575] ? __switch_to_asm+0x40/0x70 [ 596.340666] ? __switch_to_asm+0x34/0x70 [ 596.344747] ? __switch_to_asm+0x40/0x70 [ 596.348828] ? __schedule+0x884/0x1df0 [ 596.352763] ? __sched_text_start+0x8/0x8 [ 596.356938] ? find_held_lock+0x36/0x1c0 [ 596.361033] ? check_same_owner+0x340/0x340 [ 596.365405] ? kasan_check_write+0x14/0x20 [ 596.369675] __should_failslab+0x124/0x180 [ 596.373948] should_failslab+0x9/0x14 [ 596.377786] kmem_cache_alloc_trace+0x2b5/0x730 [ 596.382485] ? kfree+0x111/0x210 [ 596.385893] ? lockdep_hardirqs_on+0x421/0x5c0 [ 596.390655] p9_fd_create+0x1a7/0x3f0 [ 596.394475] ? p9_fd_show_options+0x1c0/0x1c0 [ 596.398992] ? p9_client_create+0xc16/0x1702 [ 596.403447] p9_client_create+0x877/0x1702 [ 596.407729] ? p9_client_read+0xae0/0xae0 [ 596.411901] ? __kmalloc_track_caller+0x26e/0x720 [ 596.416758] ? __lockdep_init_map+0x105/0x590 [ 596.421287] ? lockdep_init_map+0x9/0x10 [ 596.425414] ? kasan_check_write+0x14/0x20 [ 596.429678] ? __init_rwsem+0x1cc/0x2a0 [ 596.433676] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 596.438725] ? rcu_read_lock_sched_held+0x108/0x120 [ 596.443867] ? __kmalloc_track_caller+0x590/0x720 [ 596.448736] ? kstrdup+0x1e/0x70 [ 596.452139] v9fs_session_init+0x21a/0x1a80 [ 596.456484] ? v9fs_session_init+0x21a/0x1a80 [ 596.461002] ? find_held_lock+0x36/0x1c0 [ 596.465105] ? v9fs_show_options+0x7e0/0x7e0 [ 596.469544] ? kmem_cache_alloc_trace+0x275/0x730 [ 596.474408] ? kasan_check_read+0x11/0x20 [ 596.478567] ? rcu_is_watching+0x8c/0x150 [ 596.482739] ? trace_hardirqs_on+0xbd/0x2c0 [ 596.487080] ? rcu_pm_notify+0xc0/0xc0 [ 596.491001] ? v9fs_mount+0x61/0x900 [ 596.494740] ? rcu_read_lock_sched_held+0x108/0x120 [ 596.499775] ? kmem_cache_alloc_trace+0x324/0x730 [ 596.504656] v9fs_mount+0x7c/0x900 [ 596.508224] ? v9fs_drop_inode+0x150/0x150 [ 596.512485] legacy_get_tree+0x131/0x460 [ 596.516579] vfs_get_tree+0x1cb/0x5c0 [ 596.520412] do_mount+0x6f9/0x1e30 [ 596.523976] ? rcu_is_watching+0x8c/0x150 [ 596.528144] ? trace_hardirqs_on+0xbd/0x2c0 [ 596.532498] ? copy_mount_string+0x40/0x40 [ 596.536750] ? copy_mount_options+0x5f/0x380 [ 596.541166] ? kmem_cache_alloc_trace+0x324/0x730 [ 596.546102] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 596.551664] ? _copy_from_user+0xdf/0x150 [ 596.555841] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.561402] ? copy_mount_options+0x285/0x380 [ 596.565916] ksys_mount+0x12d/0x140 [ 596.569566] __x64_sys_mount+0xbe/0x150 [ 596.573563] do_syscall_64+0x1b9/0x820 [ 596.577465] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 596.582847] ? syscall_return_slowpath+0x5e0/0x5e0 [ 596.587805] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 596.593030] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 596.598121] ? recalc_sigpending_tsk+0x180/0x180 [ 596.602898] ? kasan_check_write+0x14/0x20 [ 596.607140] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 596.612004] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 596.617214] RIP: 0033:0x457099 [ 596.620436] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 596.639379] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 596.647111] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 03:51:32 executing program 0 (fault-call:3 fault-nth:19): perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000780)='9p\x00', 0x0, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) [ 596.654393] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 596.661668] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 596.669046] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 596.676354] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000012 [ 596.729433] FAULT_INJECTION: forcing a failure. [ 596.729433] name failslab, interval 1, probability 0, space 0, times 0 [ 596.740820] CPU: 1 PID: 28886 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 596.749422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 596.758833] Call Trace: [ 596.761439] dump_stack+0x1c9/0x2b4 [ 596.765101] ? dump_stack_print_info.cold.2+0x52/0x52 [ 596.770309] ? mark_held_locks+0x160/0x160 [ 596.774596] should_fail.cold.4+0xa/0x11 [ 596.778701] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 596.783825] ? __lock_acquire+0x7fc/0x5020 [ 596.788085] ? perf_trace_lock_acquire+0xeb/0x9a0 [ 596.792953] ? graph_lock+0x170/0x170 [ 596.796768] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 596.801896] ? _raw_spin_unlock_irqrestore+0x74/0xc0 [ 596.807016] ? lockdep_hardirqs_on+0x421/0x5c0 [ 596.811608] ? check_same_owner+0x340/0x340 [ 596.815955] ? rcu_note_context_switch+0x680/0x680 [ 596.820929] __should_failslab+0x124/0x180 [ 596.825184] should_failslab+0x9/0x14 [ 596.829002] kmem_cache_alloc+0x29c/0x710 [ 596.833167] ? trace_hardirqs_on+0xbd/0x2c0 [ 596.837499] ? kasan_check_read+0x11/0x20 [ 596.841678] ? add_wait_queue+0x1b9/0x2b0 [ 596.845868] ? trace_hardirqs_off_caller+0x2b0/0x2b0 [ 596.851004] p9_client_prepare_req.part.7+0xcf/0x870 [ 596.856142] ? trace_9p_protocol_dump+0x300/0x300 [ 596.861004] ? add_wait_queue+0x1b9/0x2b0 [ 596.865159] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 596.870477] ? p9_pollwait+0x83/0x230 [ 596.874307] ? p9_conn_create+0x730/0x730 03:51:33 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 596.878517] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 596.884089] p9_client_rpc+0x247/0x12c0 [ 596.888091] ? p9_fd_poll+0x1e0/0x2b0 [ 596.891929] ? p9_conn_create+0x55b/0x730 [ 596.896115] ? p9_client_prepare_req.part.7+0x870/0x870 [ 596.901521] ? ksys_dup3+0x690/0x690 [ 596.905263] ? kasan_check_read+0x11/0x20 [ 596.909443] ? rcu_is_watching+0x8c/0x150 [ 596.913613] ? trace_hardirqs_on+0xbd/0x2c0 [ 596.917955] ? rcu_pm_notify+0xc0/0xc0 [ 596.921868] ? rcu_read_lock_sched_held+0x108/0x120 [ 596.926898] ? kfree+0x111/0x210 [ 596.930294] ? lockdep_hardirqs_on+0x421/0x5c0 [ 596.934940] ? p9_fd_show_options+0x1c0/0x1c0 [ 596.939470] p9_client_create+0x9d6/0x1702 [ 596.943741] ? p9_client_read+0xae0/0xae0 [ 596.947928] ? __kmalloc_track_caller+0x26e/0x720 [ 596.952796] ? __lockdep_init_map+0x105/0x590 [ 596.957319] ? lockdep_init_map+0x9/0x10 [ 596.961459] ? kasan_check_write+0x14/0x20 [ 596.965721] ? __init_rwsem+0x1cc/0x2a0 [ 596.969712] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 596.974759] ? rcu_read_lock_sched_held+0x108/0x120 [ 596.979790] ? __kmalloc_track_caller+0x590/0x720 [ 596.984660] ? save_stack+0x43/0xd0 [ 596.988298] ? kasan_kmalloc+0xc4/0xe0 [ 596.992207] v9fs_session_init+0x21a/0x1a80 [ 596.996556] ? v9fs_session_init+0x21a/0x1a80 [ 597.001068] ? find_held_lock+0x36/0x1c0 [ 597.005163] ? v9fs_show_options+0x7e0/0x7e0 [ 597.009588] ? kmem_cache_alloc_trace+0x275/0x730 [ 597.014459] ? kasan_check_read+0x11/0x20 [ 597.018634] ? rcu_is_watching+0x8c/0x150 [ 597.022807] ? trace_hardirqs_on+0xbd/0x2c0 [ 597.027154] ? rcu_pm_notify+0xc0/0xc0 [ 597.031078] ? v9fs_mount+0x61/0x900 [ 597.035006] ? rcu_read_lock_sched_held+0x108/0x120 [ 597.040039] ? kmem_cache_alloc_trace+0x324/0x730 [ 597.044919] v9fs_mount+0x7c/0x900 [ 597.048493] ? v9fs_drop_inode+0x150/0x150 [ 597.052754] legacy_get_tree+0x131/0x460 [ 597.056847] vfs_get_tree+0x1cb/0x5c0 [ 597.060685] do_mount+0x6f9/0x1e30 [ 597.064247] ? rcu_is_watching+0x8c/0x150 [ 597.068417] ? trace_hardirqs_on+0xbd/0x2c0 [ 597.072767] ? copy_mount_string+0x40/0x40 [ 597.077038] ? copy_mount_options+0x5f/0x380 [ 597.081475] ? kmem_cache_alloc_trace+0x324/0x730 [ 597.086378] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 597.091931] ? _copy_from_user+0xdf/0x150 [ 597.096097] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.101634] ? copy_mount_options+0x285/0x380 [ 597.106158] ksys_mount+0x12d/0x140 [ 597.109810] __x64_sys_mount+0xbe/0x150 [ 597.113812] do_syscall_64+0x1b9/0x820 [ 597.117735] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 597.123130] ? syscall_return_slowpath+0x5e0/0x5e0 [ 597.128077] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 597.133106] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 597.138145] ? recalc_sigpending_tsk+0x180/0x180 [ 597.142928] ? kasan_check_write+0x14/0x20 [ 597.147195] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.152071] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.157264] RIP: 0033:0x457099 [ 597.160465] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.179387] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 597.187115] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 597.194397] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 597.201690] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 597.208982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 597.216263] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000013 [ 597.224024] kasan: CONFIG_KASAN_INLINE enabled 03:51:33 executing program 5: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40605346, &(0x7f0000000540)={0x0, 0x0, "636c69656e74310000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:33 executing program 6: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x40a85321, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000ffffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:33 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x4058534c, &(0x7f0000000540)={0x0, 0x0, "636c69656e7431000000000000008700", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 597.228693] kasan: GPF could be caused by NULL-ptr deref or user memory access [ 597.236134] general protection fault: 0000 [#1] SMP KASAN [ 597.241697] CPU: 1 PID: 28886 Comm: syz-executor0 Not tainted 4.19.0-rc2-next-20180904+ #55 [ 597.250265] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.259677] RIP: 0010:p9_client_prepare_req.part.7+0x44f/0x870 [ 597.265667] Code: ff 0f 87 29 fd ff ff e8 bf 00 d4 fa 0f be 85 a4 fe ff ff 4c 89 ea 48 c1 ea 03 89 85 a4 fe ff ff 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 97 [ 597.284588] RSP: 0018:ffff8801c8baf1f0 EFLAGS: 00010203 [ 597.289963] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90001e8c000 [ 597.297262] RDX: 000000000000000b RSI: ffffffff86a8d5b1 RDI: 0000000000000286 [ 597.304610] RBP: ffff8801c8baf368 R08: ffffed003b6246df R09: ffffed003b6246de [ 597.311891] R10: ffffed003b6246de R11: ffff8801db1236f3 R12: ffff8801beb1f580 [ 597.319159] R13: 000000000000005e R14: 0000000000002000 R15: ffff8801beb1f5b8 03:51:33 executing program 7: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0x404c534a, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000001f00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:33 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0505350, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000000000000000000000000000fffffffe00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 03:51:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000100), 0x12) r2 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc04c5349, &(0x7f0000000540)={0x0, 0x0, "636c69656e743100000000feffffff00", 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) [ 597.326437] FS: 00007f2cac94e700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 597.334677] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.340570] CR2: 00007ffd14a2fdb8 CR3: 00000001d901d000 CR4: 00000000001406e0 [ 597.347864] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.355149] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 597.362433] Call Trace: [ 597.365047] ? trace_9p_protocol_dump+0x300/0x300 [ 597.369906] ? add_wait_queue+0x1b9/0x2b0 [ 597.374075] ? __wake_up_locked_key_bookmark+0x20/0x20 [ 597.379404] ? p9_pollwait+0x83/0x230 [ 597.383220] ? p9_conn_create+0x730/0x730 [ 597.387385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.392921] p9_client_rpc+0x247/0x12c0 [ 597.396969] ? p9_fd_poll+0x1e0/0x2b0 [ 597.400830] ? p9_conn_create+0x55b/0x730 [ 597.404991] ? p9_client_prepare_req.part.7+0x870/0x870 [ 597.410379] ? ksys_dup3+0x690/0x690 [ 597.414102] ? kasan_check_read+0x11/0x20 [ 597.418247] ? rcu_is_watching+0x8c/0x150 [ 597.422443] ? trace_hardirqs_on+0xbd/0x2c0 [ 597.426763] ? rcu_pm_notify+0xc0/0xc0 [ 597.430664] ? rcu_read_lock_sched_held+0x108/0x120 [ 597.435704] ? kfree+0x111/0x210 [ 597.439093] ? lockdep_hardirqs_on+0x421/0x5c0 [ 597.443787] ? p9_fd_show_options+0x1c0/0x1c0 [ 597.448303] p9_client_create+0x9d6/0x1702 [ 597.452578] ? p9_client_read+0xae0/0xae0 [ 597.456740] ? __kmalloc_track_caller+0x26e/0x720 [ 597.461580] ? __lockdep_init_map+0x105/0x590 [ 597.466072] ? lockdep_init_map+0x9/0x10 [ 597.470131] ? kasan_check_write+0x14/0x20 [ 597.474379] ? __init_rwsem+0x1cc/0x2a0 [ 597.478377] ? do_raw_write_unlock.cold.8+0x49/0x49 [ 597.483397] ? rcu_read_lock_sched_held+0x108/0x120 [ 597.488411] ? __kmalloc_track_caller+0x590/0x720 [ 597.493254] ? save_stack+0x43/0xd0 [ 597.496885] ? kasan_kmalloc+0xc4/0xe0 [ 597.500863] v9fs_session_init+0x21a/0x1a80 [ 597.505198] ? v9fs_session_init+0x21a/0x1a80 [ 597.509699] ? find_held_lock+0x36/0x1c0 [ 597.513770] ? v9fs_show_options+0x7e0/0x7e0 [ 597.518226] ? kmem_cache_alloc_trace+0x275/0x730 [ 597.523066] ? kasan_check_read+0x11/0x20 [ 597.527221] ? rcu_is_watching+0x8c/0x150 [ 597.531388] ? trace_hardirqs_on+0xbd/0x2c0 [ 597.535722] ? rcu_pm_notify+0xc0/0xc0 [ 597.539628] ? v9fs_mount+0x61/0x900 [ 597.543380] ? rcu_read_lock_sched_held+0x108/0x120 [ 597.548413] ? kmem_cache_alloc_trace+0x324/0x730 [ 597.553275] v9fs_mount+0x7c/0x900 [ 597.556828] ? v9fs_drop_inode+0x150/0x150 [ 597.561076] legacy_get_tree+0x131/0x460 [ 597.565156] vfs_get_tree+0x1cb/0x5c0 [ 597.568970] do_mount+0x6f9/0x1e30 [ 597.572523] ? rcu_is_watching+0x8c/0x150 [ 597.576684] ? trace_hardirqs_on+0xbd/0x2c0 [ 597.581019] ? copy_mount_string+0x40/0x40 [ 597.585266] ? copy_mount_options+0x5f/0x380 [ 597.589690] ? kmem_cache_alloc_trace+0x324/0x730 [ 597.594550] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 597.600167] ? _copy_from_user+0xdf/0x150 [ 597.604356] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 597.609909] ? copy_mount_options+0x285/0x380 [ 597.614475] ksys_mount+0x12d/0x140 [ 597.618119] __x64_sys_mount+0xbe/0x150 [ 597.622109] do_syscall_64+0x1b9/0x820 [ 597.626013] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 597.631411] ? syscall_return_slowpath+0x5e0/0x5e0 [ 597.636379] ? trace_hardirqs_on_caller+0x2b0/0x2b0 [ 597.641434] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 597.646460] ? recalc_sigpending_tsk+0x180/0x180 [ 597.651228] ? kasan_check_write+0x14/0x20 [ 597.655482] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 597.660371] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.665574] RIP: 0033:0x457099 [ 597.668780] Code: fd b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 cb b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.687775] RSP: 002b:00007f2cac94dc78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 597.695500] RAX: ffffffffffffffda RBX: 00007f2cac94e6d4 RCX: 0000000000457099 [ 597.702777] RDX: 0000000020000780 RSI: 0000000020000480 RDI: 0000000000000000 [ 597.710055] RBP: 00000000009300a0 R08: 0000000020000700 R09: 0000000000000000 [ 597.717360] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000006 [ 597.725180] R13: 00000000004d3228 R14: 00000000004c81cc R15: 0000000000000013 [ 597.732464] Modules linked in: [ 597.735673] Dumping ftrace buffer: [ 597.739214] (ftrace buffer empty) [ 597.743124] ---[ end trace e77a7f2e24beff5d ]--- [ 597.747959] RIP: 0010:p9_client_prepare_req.part.7+0x44f/0x870 [ 597.753978] Code: ff 0f 87 29 fd ff ff e8 bf 00 d4 fa 0f be 85 a4 fe ff ff 4c 89 ea 48 c1 ea 03 89 85 a4 fe ff ff 48 b8 00 00 00 00 00 fc ff df <0f> b6 14 02 4c 89 e8 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 97 [ 597.772927] RSP: 0018:ffff8801c8baf1f0 EFLAGS: 00010203 03:51:33 executing program 1: mount(&(0x7f00000000c0), &(0x7f0000000080)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000000200)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f00000002c0)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0305302, &(0x7f0000000540)={0x0, 0x0, 'client1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x00', 0x0, "624fc2e5e1df1246", "f67262d74f90bb7887e2840b10e93d057638bf8cabe7d80b68f9abbfae01e743"}) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r1, 0x1000000000013) [ 597.778362] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffffc90001e8c000 [ 597.785675] RDX: 000000000000000b RSI: ffffffff86a8d5b1 RDI: 0000000000000286 [ 597.792975] RBP: ffff8801c8baf368 R08: ffffed003b6246df R09: ffffed003b6246de [ 597.800288] R10: ffffed003b6246de R11: ffff8801db1236f3 R12: ffff8801beb1f580 [ 597.807613] R13: 000000000000005e R14: 0000000000002000 R15: ffff8801beb1f5b8 [ 597.814962] FS: 00007f2cac94e700(0000) GS:ffff8801db100000(0000) knlGS:0000000000000000 [ 597.823219] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 597.829190] CR2: 00007ffd14a2fdb8 CR3: 00000001d901d000 CR4: 00000000001406e0 [ 597.836492] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 597.843792] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 597.851105] Kernel panic - not syncing: Fatal exception [ 597.856950] Dumping ftrace buffer: [ 597.860496] (ftrace buffer empty) [ 597.864196] Kernel Offset: disabled [ 597.867818] Rebooting in 86400 seconds..